From: Jim Meyering <jim@meyering.net>
Date: Sat, 11 Dec 2004 10:24:15 +0000 (+0000)
Subject: *** empty log message ***
X-Git-Tag: v5.3.0~152
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=051f13f135623fcdce99f4d3809e67e114360686;p=thirdparty%2Fcoreutils.git

*** empty log message ***
---

diff --git a/ChangeLog b/ChangeLog
index f0901dde01..49fc13bd0c 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,7 +1,15 @@
-2004-12-09  Paul Eggert  <eggert@cs.ucla.edu>
+2004-12-11  Jim Meyering  <jim@meyering.net>
 
 	* Version 5.3.0.
 
+	Avoid a race condition vulnerability in chown, when used with
+	--from=O:G and without the (-h) --no-dereference option.
+	* src/chown-core.c (restricted_chown): New function.
+	(change_file_owner): Call it.
+	Reported by Ulrich Drepper.
+
+2004-12-09  Paul Eggert  <eggert@cs.ucla.edu>
+
 	* ls now exits with status 1 on minor problems, 2 if serious trouble.
 	* NEWS: Document this.
 	* src/ls.c (LS_MINOR_PROBLEM, LS_FAILURE): New constants.