See http://bugs.debian.org/264172.
So I don't know what is the standard way to force an upload of a new .orig.tar.gz file. Most people don't see the bug, because we apt-get source as non-root, so that tar unpackas without setting the setuid bit, and then the package builds without errors. But the orig.tar.gz does in fact have the setuid bit set, and this is in fact a FTBFS error, and violates the release criterea for sarge. So my preference is that someone tell me the right way to upload the file, so that I can learn. Thomas