Comment 1 for bug 118220

This is probably a duplicate of bug 107068. While the fix for that bug fixes new custom uploads, it wouldn't affect things already in the archive. Given that you didn't find any gutsy files with this problem, it probably just indicates some existing directories that need their permissions fixed.