Description
A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving Writer() unusable and causing application unavailability (DoS). This affects versions < 1.8.3, 1.9.0, and 1.9.2. The issue is fixed in 1.8.3, 1.9.1, and 1.9.3+, where the input is chunked and the writer continues to function even if an error is logged.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | golang-logrus | 1.9.3-1 | — |
| Debian 13 | golang-logrus | No fix yet | — |
| Debian 12 | golang-logrus | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.04 LTS | golang-logrus | No fix yet | — |
| Ubuntu 25.10 | golang-logrus | No fix yet | — |
| Ubuntu 24.04 LTS | golang-logrus | No fix yet | — |
| Ubuntu 22.04 LTS | golang-logrus | No fix yet | — |
| Ubuntu 20.04 LTS | golang-logrus | No fix yet | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | golang-logrus | No fix yet | — |
| Ubuntu 16.04 LTS | golang-logrus | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | buildah +1 | 2:1.33.14-2.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | cockpit-podman | 84.1-1.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | conmon | 3:2.1.10-1.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | containernetworking-plugins | 1:1.4.0-7.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | containers-common | 2:1-82.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | crit +4 | 3.18-5.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | crun | 1.14.3-2.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | libslirp +1 | 4.4.0-2.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | netavark | 2:1.10.3-1.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | podman +6 | 4:4.9.4-28.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | python-podman +1 | 4.9.0-3.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | runc | 4:1.2.9-3.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | skopeo +1 | 2:1.14.5-6.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | slirp4netns | 1.2.3-1.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | toolbox +1 | 0.0.99.5.1-1.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | udica | 0.2.6-21.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
Show 11 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.4 EUS | runc | 4:1.2.9-1.el9_4 | RHSA-2026:0425 |
| RHEL 9.4 EUS | toolbox +1 | 0.0.99.5.1-2.el9_4 | RHSA-2026:2520 |
| RHEL 9.2 E4S | buildah +1 | 1:1.29.5-1.el9_2.2 | RHSA-2026:4532 |
| RHEL 9.2 E4S | oci-seccomp-bpf-hook | 1.2.10-1.el9_2 | RHSA-2026:11804 |
| RHEL 9.2 E4S | osbuild-composer +3 | 76.1-4.el9_2 | RHSA-2026:2688 |
| RHEL 9.2 E4S | podman +5 | 2:4.4.1-22.el9_2.5 | RHSA-2026:4533 |
| RHEL 9.2 E4S | runc | 4:1.2.9-1.el9_2.1 | RHSA-2026:4531 |
| RHEL 9.2 E4S | skopeo +1 | 2:1.11.4-0.1.el9_2.5 | RHSA-2026:13971 |
| RHEL 9.2 E4S | toolbox +1 | 0.0.99.4.1-1.el9_2 | RHSA-2026:2519 |
| RHEL 9.0 E4S | buildah +1 | 1:1.26.9-1.el9_0.3 | RHSA-2026:8325 |
| RHEL 9.0 E4S | oci-seccomp-bpf-hook | 1.2.10-1.el9_0 | RHSA-2026:15940 |
| RHEL 9.0 E4S | osbuild-composer +3 | 46.3-6.el9_0 | RHSA-2026:2686 |
| RHEL 9.0 E4S | podman +6 | 2:4.2.0-6.el9_0.6 | RHSA-2026:8325 |
| RHEL 9.0 E4S | runc | 4:1.2.9-1.el9_0 | RHSA-2026:8325 |
| RHEL 9.0 E4S | skopeo +1 | 2:1.8.0-4.1.el9_0.2 | RHSA-2026:15941, RHSA-2026:8325 |
| RHEL 8.8 TUS | aardvark-dns | 2:1.5.0-2.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | buildah +1 | 1:1.29.7-1.module+el8.8.0+24026+ca15dd94 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | cockpit-podman | 63.1-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | conmon | 3:2.1.6-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | container-selinux | 2:2.229.0-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | containernetworking-plugins | 1:1.2.0-3.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | containers-common | 2:1-67.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | crit +4 | 3.15-4.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | crun | 1.14.3-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | fuse-overlayfs | 1.11-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | libslirp +1 | 4.4.0-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | netavark | 2:1.5.1-3.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | oci-seccomp-bpf-hook | 1.2.8-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | osbuild-composer +3 | 75-6.el8_8 | RHSA-2026:2685 |
| RHEL 8.8 TUS | podman +6 | 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | python-podman +1 | 4.4.1-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | runc | 1:1.2.9-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | skopeo +1 | 2:1.11.3-0.2.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | slirp4netns | 1.2.0-3.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | toolbox +1 | 0.0.99.3-7.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | udica | 0.2.6-20.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | aardvark-dns | 2:1.5.0-2.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | buildah +1 | 1:1.29.7-1.module+el8.8.0+24026+ca15dd94 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | cockpit-podman | 63.1-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | conmon | 3:2.1.6-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | container-selinux | 2:2.229.0-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | containernetworking-plugins | 1:1.2.0-3.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | containers-common | 2:1-67.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | crit +4 | 3.15-4.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | crun | 1.14.3-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | fuse-overlayfs | 1.11-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | libslirp +1 | 4.4.0-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | netavark | 2:1.5.1-3.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | oci-seccomp-bpf-hook | 1.2.8-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | osbuild-composer +3 | 75-6.el8_8 | RHSA-2026:2685 |
| RHEL 8.8 E4S | podman +6 | 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | python-podman +1 | 4.4.1-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | runc | 1:1.2.9-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | skopeo +1 | 2:1.11.3-0.2.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | slirp4netns | 1.2.0-3.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | toolbox +1 | 0.0.99.3-7.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | udica | 0.2.6-20.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.6 TUS | buildah +1 | 1:1.26.10-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 TUS | cockpit-podman | 49.1-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 TUS | conmon | 2:2.1.4-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 TUS | container-selinux | 2:2.189.0-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 TUS | containernetworking-plugins | 1:1.1.1-5.module+el8.6.0+24209+25a14987.1 | RHSA-2026:10703 |
| RHEL 8.6 TUS | containers-common | 2:1-40.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 TUS | crit +4 | 3.15-3.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 TUS | crun | 1.14.3-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 TUS | fuse-overlayfs | 1.9-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 TUS | libslirp +1 | 4.4.0-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 TUS | netavark +1 | 2:1.0.1-40.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 TUS | oci-seccomp-bpf-hook | 1.2.6-1.module+el8.6.0+24215+d8cb7679.1 | RHSA-2026:10703 |
| RHEL 8.6 TUS | osbuild-composer +3 | 46.3-5.el8_6 | RHSA-2026:2687 |
| RHEL 8.6 TUS | podman +6 | 2:4.2.0-8.module+el8.6.0+24209+25a14987.5 | RHSA-2026:10703 |
| RHEL 8.6 TUS | python-podman +1 | 4.0.1-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 TUS | runc | 1:1.2.9-1.module+el8.6.0+24209+25a14987.1 | RHSA-2026:10703 |
| RHEL 8.6 TUS | skopeo +1 | 2:1.9.5-1.module+el8.6.0+24224+8a7523f7.1 | RHSA-2026:10703 |
| RHEL 8.6 TUS | slirp4netns | 1.2.0-3.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 TUS | toolbox +1 | 0.0.99.3-0.7.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 TUS | udica | 0.2.6-5.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | buildah +1 | 1:1.26.10-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | cockpit-podman | 49.1-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | conmon | 2:2.1.4-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | container-selinux | 2:2.189.0-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | containernetworking-plugins | 1:1.1.1-5.module+el8.6.0+24209+25a14987.1 | RHSA-2026:10703 |
| RHEL 8.6 E4S | containers-common | 2:1-40.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | crit +4 | 3.15-3.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | crun | 1.14.3-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | fuse-overlayfs | 1.9-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | libslirp +1 | 4.4.0-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | netavark +1 | 2:1.0.1-40.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | oci-seccomp-bpf-hook | 1.2.6-1.module+el8.6.0+24215+d8cb7679.1 | RHSA-2026:10703 |
| RHEL 8.6 E4S | osbuild-composer +3 | 46.3-5.el8_6 | RHSA-2026:2687 |
| RHEL 8.6 E4S | podman +6 | 2:4.2.0-8.module+el8.6.0+24209+25a14987.5 | RHSA-2026:10703 |
| RHEL 8.6 E4S | python-podman +1 | 4.0.1-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | runc | 1:1.2.9-1.module+el8.6.0+24209+25a14987.1 | RHSA-2026:10703 |
| RHEL 8.6 E4S | skopeo +1 | 2:1.9.5-1.module+el8.6.0+24224+8a7523f7.1 | RHSA-2026:10703 |
| RHEL 8.6 E4S | slirp4netns | 1.2.0-3.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | toolbox +1 | 0.0.99.3-0.7.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | udica | 0.2.6-5.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | buildah +1 | 1:1.26.10-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | cockpit-podman | 49.1-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | conmon | 2:2.1.4-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | container-selinux | 2:2.189.0-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | containernetworking-plugins | 1:1.1.1-5.module+el8.6.0+24209+25a14987.1 | RHSA-2026:10703 |
| RHEL 8.6 AUS | containers-common | 2:1-40.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | crit +4 | 3.15-3.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | crun | 1.14.3-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | fuse-overlayfs | 1.9-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | libslirp +1 | 4.4.0-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | netavark +1 | 2:1.0.1-40.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | oci-seccomp-bpf-hook | 1.2.6-1.module+el8.6.0+24215+d8cb7679.1 | RHSA-2026:10703 |
| RHEL 8.6 AUS | osbuild-composer +3 | 46.3-5.el8_6 | RHSA-2026:2687 |
| RHEL 8.6 AUS | podman +6 | 2:4.2.0-8.module+el8.6.0+24209+25a14987.5 | RHSA-2026:10703 |
| RHEL 8.6 AUS | python-podman +1 | 4.0.1-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | runc | 1:1.2.9-1.module+el8.6.0+24209+25a14987.1 | RHSA-2026:10703 |
| RHEL 8.6 AUS | skopeo +1 | 2:1.9.5-1.module+el8.6.0+24224+8a7523f7.1 | RHSA-2026:10703 |
| RHEL 8.6 AUS | slirp4netns | 1.2.0-3.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | toolbox +1 | 0.0.99.3-0.7.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | udica | 0.2.6-5.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| Red Hat Openshift Ironic 4 | python-eventlet +1 | 0.33.1-7.el9 | RHSA-2026:1540 |
| Red Hat OpenStack 18 | golang-github-openstack-k8s-operators-os-diff | 0.1.1-18.0.20260225161428.32d52e7.el9ost | RHSA-2026:7885 |
| Red Hat OpenShift 4 | bpftool | 7.0.0-284.155.1.el9_2 | RHSA-2026:1540 |
| Red Hat OpenShift 4 | cri-o | 1.28.11-13.rhaos4.15.gitf722b2f.el9 | RHSA-2026:4418 |
| Red Hat OpenShift 4 | kernel-rt +21 | 5.14.0-284.155.1.rt14.440.el9_2 | RHSA-2026:1540 |
| Red Hat OpenShift 4 | microshift +8 | 4.16.58-202603160404.p0.gb9661ec.assembly.4.16.58.el9 | RHSA-2026:4580, RHSA-2026:2746 |
| Red Hat OpenShift 4 | microshift-low-latency | 4.17.49-202602161401.p0.g708a69a.assembly.4.17.49.el9 | RHSA-2026:2746 |
| Red Hat OpenShift 4 | openshift +1 | 4.12.0-202604271501.p2.gedc7ba9.assembly.stream.el8 | RHSA-2026:12273, RHSA-2026:7238, RHSA-2026:4418 |
| Red Hat OpenShift 4 | openshift-kubelet +3 | 4.16.0-202602100409.p2.g41c4e9b.assembly.stream.el8 | RHSA-2026:2670, RHSA-2026:2658 |
| Red Hat OpenShift 4 | perf +60 | 5.14.0-284.155.1.el9_2 | RHSA-2026:1540 |
| Red Hat OpenShift 4 | podman +6 | 3:4.4.1-36.rhaos4.15.el8 | RHSA-2026:4418 |
| Red Hat OpenShift 4 | runc | 4:1.2.9-1.rhaos4.16.el8 | RHSA-2026:1540 |
| Red Hat OpenShift 4 | skopeo +1 | 2:1.11.3-7.rhaos4.15.el8 | RHSA-2026:4418 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:3428 |
| AlmaLinux 8 | buildah +1 | 2:1.33.14-2.module_el8.10.0+4120+03ad4b47 | ALSA-2026:3428 |
| AlmaLinux 8 | cockpit-podman | 84.1-1.module_el8.10.0+4102+6c76e544 | ALSA-2026:3428 |
| AlmaLinux 8 | conmon | 3:2.1.10-1.module_el8.10.0+3970+8445edf6 | ALSA-2026:3428 |
| AlmaLinux 8 | container-selinux | 2:2.229.0-2.module_el8.10.0+4090+91932338 | ALSA-2026:3428 |
| AlmaLinux 8 | containernetworking-plugins | 1:1.4.0-7.module_el8.10.0+4120+03ad4b47 | ALSA-2026:3428 |
| AlmaLinux 8 | containers-common | 2:1-82.module_el8.10.0+3876+e55593a8 | ALSA-2026:3428 |
| AlmaLinux 8 | crit | 3.18-5.module_el8.10.0+3845+87b84552 | ALSA-2026:3428 |
| AlmaLinux 8 | criu +1 | 3.18-5.module_el8.10.0+3876+e55593a8 | ALSA-2026:3428 |
| AlmaLinux 8 | criu-devel | 3.18-5.module_el8.10.0+3858+6ad51f9f | ALSA-2026:3428 |
| AlmaLinux 8 | criu-libs | 3.18-5.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:3428 |
| AlmaLinux 8 | crun | 1.14.3-2.module_el8.10.0+4082+f7f0c95e | ALSA-2026:3428 |
| AlmaLinux 8 | fuse-overlayfs | 1.13-1.module_el8.10.0+3792+03eaed9c | ALSA-2026:3428 |
| AlmaLinux 8 | libslirp | 4.4.0-2.module_el8.10.0+4023+db236c53 | ALSA-2026:3428 |
| AlmaLinux 8 | libslirp-devel | 4.4.0-2.module_el8.10.0+3970+8445edf6 | ALSA-2026:3428 |
| AlmaLinux 8 | netavark | 2:1.10.3-1.module_el8.10.0+3970+8445edf6 | ALSA-2026:3428 |
| AlmaLinux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:3428 |
| AlmaLinux 8 | podman +6 | 4:4.9.4-28.module_el8.10.0+4120+03ad4b47 | ALSA-2026:3428 |
| AlmaLinux 8 | python3-podman | 4.9.0-3.module_el8.10.0+4016+efd18bf8 | ALSA-2026:3428 |
| AlmaLinux 8 | runc | 4:1.2.9-3.module_el8.10.0+4120+03ad4b47 | ALSA-2026:3428 |
| AlmaLinux 8 | skopeo +1 | 2:1.14.5-6.module_el8.10.0+4120+03ad4b47 | ALSA-2026:3428 |
| AlmaLinux 8 | slirp4netns | 1.2.3-1.module_el8.10.0+3926+f12484f5 | ALSA-2026:3428 |
| AlmaLinux 8 | toolbox +1 | 0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:3428 |
| AlmaLinux 8 | udica | 0.2.6-21.module_el8.10.0+4068+0e21408f | ALSA-2026:3428 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1874+ce489889 | RLSA-2026:3428 |
| Rocky Linux 8 | buildah | 2:1.33.14-2.module+el8.10.0+40087+cfe9c127 | RLSA-2026:3428 |
| Rocky Linux 8 | cockpit-podman | 84.1-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:3428 |
| Rocky Linux 8 | conmon | 3:2.1.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:3428 |
| Rocky Linux 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2026:3428 |
| Rocky Linux 8 | containernetworking-plugins | 1:1.4.0-7.module+el8.10.0+40087+cfe9c127 | RLSA-2026:3428 |
| Rocky Linux 8 | containers-common | 2:1-82.module+el8.10.0+1843+6892ab28 | RLSA-2026:3428 |
| Rocky Linux 8 | criu | 3.18-5.module+el8.10.0+1815+5fe7415e | RLSA-2026:3428 |
| Rocky Linux 8 | crun | 1.14.3-2.module+el8.10.0+1815+5fe7415e | RLSA-2026:3428 |
| Rocky Linux 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:3428 |
| Rocky Linux 8 | libslirp | 4.4.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2026:3428 |
| Rocky Linux 8 | netavark | 2:1.10.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:3428 |
| Rocky Linux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:3428 |
| Rocky Linux 8 | podman | 4:4.9.4-28.module+el8.10.0+40087+cfe9c127 | RLSA-2026:3428 |
| Rocky Linux 8 | python-podman | 4.9.0-3.module+el8.10.0+1896+b18fa106 | RLSA-2026:3428 |
| Rocky Linux 8 | runc | 4:1.2.9-3.module+el8.10.0+40087+cfe9c127 | RLSA-2026:3428 |
| Rocky Linux 8 | skopeo | 2:1.14.5-6.module+el8.10.0+40087+cfe9c127 | RLSA-2026:3428 |
| Rocky Linux 8 | slirp4netns | 1.2.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:3428 |
| Rocky Linux 8 | toolbox | 0.0.99.5.1-1.module+el8.10.0+40087+cfe9c127.rocky.0.2 | RLSA-2026:3428 |
| Rocky Linux 8 | udica | 0.2.6-21.module+el8.10.0+1815+5fe7415e | RLSA-2026:3428 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 16.0 | govulncheck-vulndb | 0.0.20260723T184607-160000.1.1 | openSUSE-SU-2026:21483-1 |
| openSUSE Leap 15.6 | govulncheck-vulndb | 0.0.20251230T014957-150000.1.134.1 | SUSE-SU-2026:0292-1, SUSE-SU-2026:0037-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | amazon-ecr-credential-helper | 0.11.0-2.amzn2023 | ALAS2023-2025-1327 |
| Amazon Linux 2023 | ecs-init | 1.82.2-1.amzn2023 | ALAS2023-2025-1345 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | cni-plugins | 1.4.0-4 | — |
| Azure Linux 3 | containerized-data-importer | 1.62.0-1 | — |
| Azure Linux 3 | dcos-cli | 1.2.0-20 | — |
| Azure Linux 3 | delve +1 | No fix yet | — |
| Azure Linux 3 | flannel | 0.24.2-22 | — |
| Azure Linux 3 | influxdb | 2.7.5-10 | — |
| Azure Linux 3 | kata-containers | 3.19.1.kata2-6 | — |
| Azure Linux 3 | kubernetes | 1.30.10-18 | — |
| Azure Linux 2 (CBL-Mariner) | cert-manager | 1.11.2-25 | — |
| Azure Linux 2 (CBL-Mariner) | cf-cli | 8.4.0-26 | — |
| Azure Linux 2 (CBL-Mariner) | cni-plugins | 1.3.0-10 | — |
| Azure Linux 2 (CBL-Mariner) | containerized-data-importer | 1.55.0-27 | — |
| Azure Linux 2 (CBL-Mariner) | cri-o | 1.22.3-18 | — |
| Azure Linux 2 (CBL-Mariner) | dcos-cli | 1.2.0-23 | — |
| Azure Linux 2 (CBL-Mariner) | delve +4 | No fix yet | — |
| Azure Linux 2 (CBL-Mariner) | flannel | 0.14.0-27 | — |
| Azure Linux 2 (CBL-Mariner) | influxdb | 2.6.1-28 | — |
| Azure Linux 2 (CBL-Mariner) | jx | 3.2.236-24 | — |
| Azure Linux 2 (CBL-Mariner) | kube-vip-cloud-provider | 0.0.2-24 | — |
| Azure Linux 2 (CBL-Mariner) | kubernetes | 1.28.4-21 | — |
| Azure Linux 2 (CBL-Mariner) | kubevirt | 0.59.0-33 | — |
| Azure Linux 2 (CBL-Mariner) | local-path-provisioner | 0.0.21-20 | — |
| Azure Linux 2 (CBL-Mariner) | moby-buildx | 0.7.1-27 | — |
| Azure Linux 2 (CBL-Mariner) | moby-compose | 2.17.3-13 | — |
| Azure Linux 2 (CBL-Mariner) | prometheus | 2.37.9-6 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | buildah +1 | 2:1.33.14-2.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | cockpit-podman | 84.1-1.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | conmon | 3:2.1.10-1.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | containernetworking-plugins | 1:1.4.0-6.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | containers-common | 2:1-82.0.1.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | crit +4 | 3.18-5.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | crun | 1.14.3-2.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | libslirp +1 | 4.4.0-2.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | netavark | 2:1.10.3-1.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | podman +6 | 4:4.9.4-27.0.1.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | python3-podman | 4.9.0-3.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | runc | 4:1.2.9-3.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | skopeo +1 | 2:1.14.5-6.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | slirp4netns | 1.2.3-1.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | udica | 0.2.6-21.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | aws-flb-cloudwatch +1 | 1.9.4-r22 | — |
| Wolfi rolling | aws-flb-firehose +1 | 1.7.2-r22 | — |
| Wolfi rolling | aws-flb-kinesis +1 | 1.10.3-r3 | — |
| Wolfi rolling | docker-credential-gcr | 2.1.30-r7 | — |
| Wolfi rolling | go-discover | 0_git20251216-r0 | — |
| Wolfi rolling | gostatsd | 28.3.0-r21 | — |
| Wolfi rolling | hello-world-golang | 1.3-r16 | — |
| Wolfi rolling | kpt | 1.0.0_beta55-r15 | — |
| Wolfi rolling | kube-fluentd-operator +3 | 1.18.2-r53 | — |
| Wolfi rolling | kubeflow-access-management +1 | 1.10.0-r10 | — |
| Wolfi rolling | neuvector-dbgen +1 | 0_git20240423-r10 | — |
| Wolfi rolling | newrelic-nri-statsd | 2.12.0-r2 | — |
| Wolfi rolling | php-fpm_exporter | 2.2.0-r19 | — |
| Wolfi rolling | smokescreen +1 | 0_git20251203-r1 | — |
| Wolfi rolling | sonobuoy +1 | 0.57.3-r12 | — |
| Wolfi rolling | src-fingerprint | 0.19.0-r36 | — |
| Wolfi rolling | terraform-provider-google | 7.12.0-r3 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
mjuanxd/logrus-dos-poc ★ 2 · Nov 7, 2025
CVE-2025-65637: Logrus Denial of Service Vulnerability
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/sirupsen/logrus | < 1.8.3 | 1.8.3 | GHSA-4f99-4q7p-p3gh |
| Go | github.com/sirupsen/logrus | >= 1.9.0, < 1.9.1 | 1.9.1 | GHSA-4f99-4q7p-p3gh |
| Go | github.com/sirupsen/logrus | >= 1.9.2, < 1.9.3 | 1.9.3 | GHSA-4f99-4q7p-p3gh |
| Go | github.com/sirupsen/logrus | < 1.8.3 · >= 1.9.0, < 1.9.1 · >= 1.9.2, < 1.9.3 | 1.8.3, 1.9.1, 1.9.3 | GO-2025-4188 |
Advisories 38
- ALSA-2026:3428 Important: container-tools:rhel8 security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2026:8325 Red Hat Security Advisory: buildah, crun, podman, runc, and skopeo security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:6191 Red Hat Security Advisory: container-tools:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:4693 Red Hat Security Advisory: container-tools:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:4532 Red Hat Security Advisory: buildah security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:4533 Red Hat Security Advisory: podman security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:4418 Red Hat Security Advisory: OpenShift Container Platform 4.15.62 packages and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:3428 Red Hat Security Advisory: container-tools:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:10703 Red Hat Security Advisory: container-tools:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:7885 Red Hat Security Advisory: Red Hat OpenStack Services on OpenShift 18.0.18 (golang-github-openstack-k8s-operators-os-diff) security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2026:7238 Red Hat Security Advisory: OpenShift Container Platform 4.13.65 packages and security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:4580 Red Hat Security Advisory: Red Hat build of MicroShift 4.16.58 security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:4531 Red Hat Security Advisory: runc security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:2973 Red Hat Security Advisory: OpenShift Container Platform 4.14.62 packages and security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:2746 Red Hat Security Advisory: Red Hat build of MicroShift 4.17.49 security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:2688 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:2686 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:2687 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:2670 Red Hat Security Advisory: OpenShift Container Platform 4.17.49 packages and security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:2685 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:2658 Red Hat Security Advisory: OpenShift Container Platform 4.16.57 packages and security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:2520 Red Hat Security Advisory: toolbox security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:2519 Red Hat Security Advisory: toolbox security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:15940 Red Hat Security Advisory: oci-seccomp-bpf-hook security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:15941 Red Hat Security Advisory: skopeo security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:1540 Red Hat Security Advisory: OpenShift Container Platform 4.15.61 packages and security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:13971 Red Hat Security Advisory: skopeo security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:12273 Red Hat Security Advisory: OpenShift Container Platform 4.12.88 packages and security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:11804 Red Hat Security Advisory: oci-seccomp-bpf-hook security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:0425 Red Hat Security Advisory: runc security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- openSUSE-SU-2026:21483-1 Security update for govulncheck-vulndb SUSE / openSUSE Security Updates · Jul 31, 2026
- WID-SEC-2026-0114 Red Hat OpenShift (github.com/sirupsen/logrus): Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Jul 26, 2026
- SUSE-SU-2026:0292-1 Security update for govulncheck-vulndb SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:0037-1 Security update for govulncheck-vulndb SUSE / openSUSE Security Updates · Mar 23, 2026
- RLSA-2026:3428 Important: container-tools:rhel8 security update Rocky Linux Security Advisories · Feb 28, 2026
- ELSA-2026-3428 Important: container-tools:ol8 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Feb 26, 2026
- ALAS2023-2025-1327 Important: amazon-ecr-credential-helper security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jan 7, 2026
- ALAS2023-2025-1345 Important: ecs-init security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jan 7, 2026
References
- https://github.com/mjuanxd/logrus-dos-poc
- https://github.com/sirupsen/logrus/issues/1370
- https://github.com/sirupsen/logrus/pull/1376
- https://github.com/sirupsen/logrus/releases/tag/v1.8.3
- https://github.com/sirupsen/logrus/releases/tag/v1.9.1
- https://github.com/sirupsen/logrus/releases/tag/v1.9.3
- https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMSIRUPSENLOGRUS-5564391
- https://github.com/mjuanxd/logrus-dos-poc/blob/main/README.md