X-Git-Url: https://git.brokenzipper.com/gitweb?a=blobdiff_plain;f=NEWS;h=fa096500758cc21d3e7e47b2450cb99d233c09b1;hb=9bf87b195e732d03db5efc8850ac5e29a2538df9;hp=47ef203a0b7c2f1b90c396eed0af43f36ce87cd1;hpb=49ea4c50575f66e8f0450e463e1d882eed6255ec;p=chaz%2Ftar

diff --git a/NEWS b/NEWS
index 47ef203..fa09650 100644
--- a/NEWS
+++ b/NEWS
@@ -9,6 +9,10 @@ Please send GNU tar bug reports to <bug-tar@gnu.org>
   records, but if you have one and you trust its contents, you can
   decode it with GNU tar 1.16 or earlier.
 
+* Race conditions have been fixed that in some cases briefly allowed
+  files extracted by 'tar -x --same-owner' (or plain 'tar -x', when
+  running as root) to be accessed by users that they shouldn't have been.
+
 version 1.16 - Sergey Poznyakoff, 2006-10-21
 
 * After creating an archive, tar exits with code 1 if some files were