A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving Writer() unusable and causing application unavailability (DoS). This affects versions < 1.8.3, 1.9.0, and 1.9.2. The issue is fixed in 1.8.3, 1.9.1, and 1.9.3+, where the input is chunked and the writer continues to function even if an error is logged.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cockpit-podmanUpgrade podman-catatonitUpgrade toolboxUpgrade crunUpgrade podman-testsUpgrade libslirpUpgrade python3-podmanUpgrade slirp4netnsUpgrade buildah-testsUpgrade podman-gvproxyUpgrade podman-pluginsUpgrade fuse-overlayfsUpgrade toolbox-testsUpgrade criu-develUpgrade netavarkUpgrade udicaUpgrade podman-dockerUpgrade criuUpgrade conmonUpgrade container-selinuxUpgrade critUpgrade podmanUpgrade skopeoUpgrade skopeo-testsUpgrade buildahUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade runcUpgrade containers-commonUpgrade python3-criuUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade libslirp-develUpgrade aardvark-dns | Mar 4, 2026 | Feb 26, 2026 |
| Amazon Linux Ami 2 | — | Upgrade dockerUpgrade amazon-ecr-credential-helper-debuginfoUpgrade docker-debuginfoUpgrade amazon-ecr-credential-helperUpgrade ecs-init | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade ecs-initUpgrade amazon-ecr-credential-helper | Jan 12, 2026 | Dec 4, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kata-containers | Mar 10, 2026 | Mar 10, 2026 |
| Oracle_linux | — | Upgrade aardvark-dnsUpgrade critUpgrade criuUpgrade python3-podmanUpgrade fuse-overlayfsUpgrade podman-dockerUpgrade containernetworking-pluginsUpgrade runcUpgrade buildahUpgrade udicaUpgrade podman-catatonitUpgrade skopeoUpgrade buildah-testsUpgrade podmanUpgrade podman-remoteUpgrade netavarkUpgrade criu-libsUpgrade cockpit-podmanUpgrade skopeo-testsUpgrade criu-develUpgrade slirp4netnsUpgrade container-selinuxUpgrade oci-seccomp-bpf-hookUpgrade python3-criuUpgrade libslirpUpgrade crunUpgrade libslirp-develUpgrade podman-gvproxyUpgrade podman-testsUpgrade containers-commonUpgrade podman-pluginsUpgrade conmon | Mar 2, 2026 | Dec 4, 2025 |
| Redhat Openshift | — | Upgrade openshiftUpgrade kernel-rtUpgrade runcUpgrade python-eventletUpgrade microshiftUpgrade kernel | Aug 10, 2026 | Dec 4, 2025 |
| Redhat_linux | — | Upgrade osbuild-composer-core-debuginfoUpgrade skopeo-debugsourceUpgrade toolbox-testsUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade criuUpgrade podman-plugins-debuginfoUpgrade containers-commonUpgrade buildah-debuginfoUpgrade osbuild-composerUpgrade fuse-overlayfsUpgrade podman-debuginfoUpgrade podman-catatonitUpgrade cockpit-podmanUpgrade libslirp-debuginfoUpgrade runc-debugsourceUpgrade criu-debugsourceUpgrade podman-dockerUpgrade osbuild-composer-tests-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade skopeo-debuginfoUpgrade criu-debuginfoUpgrade buildah-testsUpgrade podman-gvproxyUpgrade containernetworking-pluginsUpgrade osbuild-composer-coreUpgrade conmon-debugsourceUpgrade crun-debugsourceUpgrade buildah-tests-debuginfoUpgrade crun-debuginfoUpgrade buildahUpgrade slirp4netnsUpgrade podman-remoteUpgrade aardvark-dnsUpgrade criu-libsUpgrade python3-criuNo solution existsUpgrade conmon-debuginfoUpgrade python3-podmanUpgrade runc-debuginfoUpgrade netavarkUpgrade osbuild-composer-debugsourceUpgrade criu-libs-debuginfoUpgrade buildah-debugsourceUpgrade toolboxUpgrade libslirp-debugsourceUpgrade runcUpgrade osbuild-composer-debuginfoUpgrade slirp4netns-debuginfoUpgrade osbuild-composer-dnf-jsonUpgrade skopeo-testsUpgrade osbuild-composer-workerUpgrade fuse-overlayfs-debuginfoUpgrade conmonUpgrade podman-remote-debuginfoUpgrade libslirp-develUpgrade toolbox-debuginfoUpgrade skopeoUpgrade crunUpgrade containernetworking-plugins-debugsourceUpgrade critUpgrade podman-debugsourceUpgrade container-selinuxUpgrade udicaUpgrade libslirpUpgrade podman-pluginsUpgrade podman-catatonit-debuginfoUpgrade toolbox-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-testsUpgrade containernetworking-plugins-debuginfoUpgrade podmanUpgrade criu-develUpgrade osbuild-composer-worker-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade slirp4netns-debugsource | Jan 15, 2026 | Dec 4, 2025 |
| Rocky_linux | — | Upgrade podman-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-plugins-debuginfoUpgrade runc-debuginfoUpgrade skopeo-testsUpgrade podman-pluginsUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-pluginsUpgrade runcUpgrade podman-remoteUpgrade slirp4netns-debuginfoUpgrade critUpgrade slirp4netns-debugsourceUpgrade podman-remote-debuginfoUpgrade toolbox-debugsourceUpgrade conmon-debuginfoUpgrade criu-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade python3-criuUpgrade toolbox-debuginfoUpgrade criu-libs-debuginfoUpgrade libslirp-debuginfoUpgrade criu-develUpgrade crunUpgrade libslirp-develUpgrade podman-debuginfoUpgrade runc-debugsourceUpgrade toolbox-testsUpgrade conmon-debugsourceUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfsUpgrade containers-commonUpgrade libslirpUpgrade toolboxUpgrade netavarkUpgrade slirp4netnsUpgrade podman-testsUpgrade criuUpgrade buildah-debuginfoUpgrade podmanUpgrade fuse-overlayfs-debuginfoUpgrade crun-debuginfoUpgrade criu-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade buildah-debugsourceUpgrade conmonUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hookUpgrade skopeoUpgrade podman-catatonitUpgrade buildah-tests-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade crun-debugsourceUpgrade criu-libsUpgrade buildahUpgrade buildah-testsUpgrade aardvark-dns | Mar 2, 2026 | Feb 27, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub