diff --git a/docs/news.xml b/docs/news.xml
index 483f9d6d11a0cbfadebdd2352b00a4a3afa6e306..a5c3d1d902743def3e28d334ae4699534383411c 100644
--- a/docs/news.xml
+++ b/docs/news.xml
@@ -37,6 +37,18 @@
     <section title="New features">
     </section>
     <section title="Improvements">
+      <change>
+        <summary>
+          qemu: Set DAC permissions properly for spice rendernode
+        </summary>
+        <description>
+          When a <code>rendernode</code> path is set for SPICE GL on
+          <code>qemu:///system</code>, we now correctly set DAC permissions
+          on the device at VM startup. This is the last remaining hurdle to
+          let SPICE GL work for <code>qemu:///system</code> without any
+          external host changes.
+        </description>
+      </change>
     </section>
     <section title="Bug fixes">
     </section>