In lastlog_openseek() in loginrec.c, the call to open(lastlog_file, filemode) should have a third parameter to specify the permissions if the file is created (0644?). If the log file does not exist, it will be created since O_CREAT was passed to open, but the permissions will be set to whatever garbage value is on the end of the stack. I've verified that this problem occurs on my system if lastlog_file does not exist.
fixed, thanks
Mass change of RESOLVED bugs to CLOSED