news/bugfix-3900.md: add news file

Signed-off-by: Balazs Scheidler <bazsi77@gmail.com>
syslog-ng · Jan 31, 2022 · f354f7b · f354f7b
1 parent cb787ec
commit f354f7b
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/news/bugfix-3900.md b/news/bugfix-3900.md
@@ -0,0 +1,5 @@
+`syslog-ng`: fix a SIGSEGV triggered by an incorrectly formatted "CONFIG"
+command, received on the syslog-ng control socket.  The only known
+implementation of the control protocol is syslog-ng-ctl itself, which always
+sends a correct command, but anyone with access to the UNIX domain socket
+`syslog-ng.ctl` (root only by default) can trigger a crash.