File _patchinfo of Package patchinfo
<patchinfo incident="12645"> <issue tracker="bnc" id="1169385">VUL-0: CVE-2020-8019: syslog-ng: Local privilege escalation from new to root in %post</issue> <packager>tsaupe</packager> <rating>moderate</rating> <category>recommended</category> <summary>Recommended update for syslog-ng</summary> <description>This update for syslog-ng fixes the following issues: - removed creating news log files from the RPM %post section. Added syslog-ng.conf options to create files/directories automatically, and commenting the relevant part out. </description> </patchinfo>