For those who have installed the update, what is
the umask in src/CMD/generic/gmake.sh? (it's about
the 3rd or 4th line in this file.)
It should read:
umask 022
If not, anyone in the same group as the owner of
your grass installation can muck around with
the binaries (accidentally or on purpose).