chown race fix

diff --git a/NEWS b/NEWS
index 26b1e2514be1b0f496d9eb84407fac38670295af..76147bc540105d7dc9feedcbaa550e2bd01cf477 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -34,6 +34,9 @@ GNU coreutils NEWS                                    -*- outline -*-
 
   chmod now accepts multiple mode-like options, e.g., "chmod -r -w f".
 
+  chown is no longer subject to a race condition vulnerability, when
+  used with --from=O:G and without the (-h) --no-dereference option.
+
   cut's --output-delimiter=D option works with abutting byte ranges.
 
   du no longer segfaults when a subdirectory of an operand