A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving Writer() unusable and causing application unavailability (DoS). This affects versions < 1.8.3, 1.9.0, and 1.9.2. The issue is fixed in 1.8.3, 1.9.1, and 1.9.3+, where the input is chunked and the writer continues to function even if an error is logged.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-gvproxyUpgrade criuUpgrade fuse-overlayfsUpgrade toolbox-testsUpgrade cockpit-podmanUpgrade toolboxUpgrade podman-catatonitUpgrade criu-develUpgrade python3-podmanUpgrade podman-dockerUpgrade crunUpgrade podman-pluginsUpgrade podman-testsUpgrade buildah-testsUpgrade slirp4netnsUpgrade udicaUpgrade libslirpUpgrade conmonUpgrade netavarkUpgrade container-selinuxUpgrade runcUpgrade python3-criuUpgrade libslirp-develUpgrade aardvark-dnsUpgrade skopeoUpgrade criu-libsUpgrade skopeo-testsUpgrade containers-commonUpgrade podmanUpgrade critUpgrade oci-seccomp-bpf-hookUpgrade buildahUpgrade podman-remoteUpgrade containernetworking-plugins | Mar 4, 2026 | Feb 26, 2026 |
| Amazon Linux Ami 2 | — | Upgrade amazon-ecr-credential-helperUpgrade ecs-initUpgrade dockerUpgrade docker-debuginfoUpgrade amazon-ecr-credential-helper-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade amazon-ecr-credential-helperUpgrade ecs-init | Jan 12, 2026 | Dec 4, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kata-containers | Mar 10, 2026 | Mar 10, 2026 |
| Oracle_linux | — | Upgrade criu-libsUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade podman-testsUpgrade podman-pluginsUpgrade containers-commonUpgrade skopeo-testsUpgrade conmonUpgrade python3-criuUpgrade criu-develUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade crunUpgrade libslirp-develUpgrade cockpit-podmanUpgrade container-selinuxUpgrade critUpgrade fuse-overlayfsUpgrade criuUpgrade buildahUpgrade python3-podmanUpgrade podman-catatonitUpgrade skopeoUpgrade aardvark-dnsUpgrade podman-remoteUpgrade podman-dockerUpgrade containernetworking-pluginsUpgrade udicaUpgrade runcUpgrade buildah-testsUpgrade netavarkUpgrade podman | Mar 2, 2026 | Dec 4, 2025 |
| Redhat Openshift | — | Upgrade kernelUpgrade python-eventletUpgrade microshiftUpgrade openshiftUpgrade kernel-rtUpgrade runc | Aug 10, 2026 | Dec 4, 2025 |
| Redhat_linux | — | Upgrade critUpgrade crunUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runc-debuginfoUpgrade podmanUpgrade libslirp-develUpgrade libslirpUpgrade netavarkUpgrade toolbox-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-debugsourceUpgrade libslirp-debugsourceUpgrade toolboxUpgrade python3-podmanUpgrade skopeo-testsUpgrade skopeoUpgrade osbuild-composer-worker-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade osbuild-composer-workerUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-libs-debuginfoUpgrade conmonUpgrade criu-develUpgrade podman-remote-debuginfoUpgrade podman-testsUpgrade slirp4netns-debugsourceUpgrade osbuild-composer-dnf-jsonUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonit-debuginfoUpgrade runcUpgrade podman-pluginsUpgrade buildah-debugsourceUpgrade container-selinuxUpgrade toolbox-debugsourceUpgrade osbuild-composer-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade udicaUpgrade osbuild-composer-debuginfoUpgrade podman-remoteUpgrade osbuild-composerUpgrade cockpit-podmanUpgrade conmon-debuginfoUpgrade crun-debuginfoUpgrade criu-libsUpgrade libslirp-debuginfoUpgrade python3-criuUpgrade skopeo-debugsourceUpgrade criuUpgrade osbuild-composer-tests-debuginfoUpgrade aardvark-dnsUpgrade buildah-debuginfoUpgrade podman-catatonitUpgrade criu-debugsourceUpgrade podman-dockerUpgrade podman-plugins-debuginfoNo solution existsUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade slirp4netnsUpgrade buildahUpgrade skopeo-debuginfoUpgrade criu-debuginfoUpgrade podman-gvproxyUpgrade podman-debuginfoUpgrade toolbox-testsUpgrade containernetworking-pluginsUpgrade osbuild-composer-coreUpgrade podman-gvproxy-debuginfoUpgrade crun-debugsourceUpgrade osbuild-composer-core-debuginfoUpgrade buildah-testsUpgrade conmon-debugsourceUpgrade runc-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfsUpgrade buildah-tests-debuginfo | Jan 15, 2026 | Dec 4, 2025 |
| Rocky_linux | — | Upgrade podman-gvproxy-debuginfoUpgrade podman-plugins-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-debuginfoUpgrade libslirp-debugsourceUpgrade podman-debugsourceUpgrade criu-develUpgrade runc-debugsourceUpgrade python3-criuUpgrade criu-libs-debuginfoUpgrade podman-remote-debuginfoUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runc-debuginfoUpgrade libslirp-debuginfoUpgrade skopeo-testsUpgrade toolbox-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-pluginsUpgrade runcUpgrade toolbox-debugsourceUpgrade criu-debugsourceUpgrade conmon-debuginfoUpgrade podman-remoteUpgrade crunUpgrade slirp4netns-debuginfoUpgrade containernetworking-pluginsUpgrade critUpgrade criu-debuginfoUpgrade conmonUpgrade podman-gvproxyUpgrade containers-commonUpgrade buildah-testsUpgrade fuse-overlayfs-debuginfoUpgrade criuUpgrade conmon-debugsourceUpgrade buildah-debuginfoUpgrade slirp4netnsUpgrade podman-testsUpgrade crun-debuginfoUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade oci-seccomp-bpf-hookUpgrade podmanUpgrade fuse-overlayfs-debugsourceUpgrade buildah-debugsourceUpgrade buildah-tests-debuginfoUpgrade skopeoUpgrade podman-catatonitUpgrade buildahUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfsUpgrade crun-debugsourceUpgrade toolboxUpgrade netavarkUpgrade containernetworking-plugins-debugsourceUpgrade criu-libsUpgrade libslirp | Mar 2, 2026 | Feb 27, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub