After doing 'make dist' on a package that has been created
using automake, the scripts in the source directory that are
also included in a distribution are left with rwxrwxrwx
The problem is fixed in CVS, see this URL for a patch:
I guess you should make a security advisory of this.
Thanks, should now be fixed with current rpms.