X-Git-Url: https://git.dogcows.com/gitweb?a=blobdiff_plain;f=NEWS;h=fa096500758cc21d3e7e47b2450cb99d233c09b1;hb=908d78d2082f605318be6b6a774676e3319cf650;hp=47ef203a0b7c2f1b90c396eed0af43f36ce87cd1;hpb=192f55e2a027c025e034f65215d2dbf3723429a0;p=chaz%2Ftar

diff --git a/NEWS b/NEWS
index 47ef203..fa09650 100644
--- a/NEWS
+++ b/NEWS
@@ -9,6 +9,10 @@ Please send GNU tar bug reports to <bug-tar@gnu.org>
   records, but if you have one and you trust its contents, you can
   decode it with GNU tar 1.16 or earlier.
 
+* Race conditions have been fixed that in some cases briefly allowed
+  files extracted by 'tar -x --same-owner' (or plain 'tar -x', when
+  running as root) to be accessed by users that they shouldn't have been.
+
 version 1.16 - Sergey Poznyakoff, 2006-10-21
 
 * After creating an archive, tar exits with code 1 if some files were