*** empty log message ***
authorJim Meyering <jim@meyering.net>
Sat, 11 Dec 2004 10:24:15 +0000 (10:24 +0000)
committerJim Meyering <jim@meyering.net>
Sat, 11 Dec 2004 10:24:15 +0000 (10:24 +0000)
ChangeLog

index f0901dde015d5b2ca2a1187f24541d88cdc3cadc..49fc13bd0cd81b56c323643ecfd6b69e79e3968f 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,7 +1,15 @@
-2004-12-09  Paul Eggert  <eggert@cs.ucla.edu>
+2004-12-11  Jim Meyering  <jim@meyering.net>
 
        * Version 5.3.0.
 
+       Avoid a race condition vulnerability in chown, when used with
+       --from=O:G and without the (-h) --no-dereference option.
+       * src/chown-core.c (restricted_chown): New function.
+       (change_file_owner): Call it.
+       Reported by Ulrich Drepper.
+
+2004-12-09  Paul Eggert  <eggert@cs.ucla.edu>
+
        * ls now exits with status 1 on minor problems, 2 if serious trouble.
        * NEWS: Document this.
        * src/ls.c (LS_MINOR_PROBLEM, LS_FAILURE): New constants.