CVE-2025-65637

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters.

CVE-2025-65637 is fixed in 42 products on 1 platform, first by DEBIAN-CVE-2025-65637, released December 4, 2025. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.5
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0068
52nd percentile

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang: html/template: errors returned from MarshalJSON methods may break template escaping (CVE-2024-24785) * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload (CVE-2025-65637) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
aardvark-dns · RHEL 8 2:1.10.1-2.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
aardvark-dns · almalinux 8 2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7 ALSA-2026:3428 Feb 26, 2026
aardvark-dns · ol 8 2:1.10.1-2.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
aardvark-dns · rocky 8 2:1.10.1-2.module+el8.10.0+1874+ce489889 RLSA-2026:3428 Feb 27, 2026
amazon-ecr-credential-helper · amzn 2023 0.11.0-2.amzn2023 ALAS2023-2025-1327 Jan 7, 2026
buildah · RHEL 8 2:1.33.14-2.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
buildah · almalinux 8 2:1.33.14-2.module_el8.10.0+4120+03ad4b47 ALSA-2026:3428 Feb 26, 2026
buildah · ol 8 2:1.33.14-2.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
buildah · rocky 8 2:1.33.14-2.module+el8.10.0+40087+cfe9c127 RLSA-2026:3428 Feb 27, 2026
buildah-tests · RHEL 8 2:1.33.14-2.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
buildah-tests · almalinux 8 2:1.33.14-2.module_el8.10.0+4120+03ad4b47 ALSA-2026:3428 Feb 26, 2026
buildah-tests · ol 8 2:1.33.14-2.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
cockpit-podman · RHEL 8 0:84.1-1.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
cockpit-podman · almalinux 8 84.1-1.module_el8.10.0+4102+6c76e544 ALSA-2026:3428 Feb 26, 2026
cockpit-podman · ol 8 0:84.1-1.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
cockpit-podman · rocky 8 0:84.1-1.module+el8.10.0+2001+6a33db9f RLSA-2026:3428 Feb 27, 2026
conmon · RHEL 8 3:2.1.10-1.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
conmon · almalinux 8 3:2.1.10-1.module_el8.10.0+3970+8445edf6 ALSA-2026:3428 Feb 26, 2026
conmon · ol 8 3:2.1.10-1.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
conmon · rocky 8 3:2.1.10-1.module+el8.10.0+1896+b18fa106 RLSA-2026:3428 Feb 27, 2026
container-selinux · RHEL 8 2:2.229.0-2.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
container-selinux · almalinux 8 2:2.229.0-2.module_el8.10.0+4090+91932338 ALSA-2026:3428 Feb 26, 2026
container-selinux · ol 8 2:2.229.0-2.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
container-selinux · rocky 8 2:2.229.0-2.module+el8.10.0+40047+0c0a73f4 RLSA-2026:3428 Feb 27, 2026
containernetworking-plugins · RHEL 8 1:1.4.0-7.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
containernetworking-plugins · almalinux 8 1:1.4.0-7.module_el8.10.0+4120+03ad4b47 ALSA-2026:3428 Feb 26, 2026
containernetworking-plugins · ol 8 1:1.4.0-6.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
containernetworking-plugins · rocky 8 1:1.4.0-7.module+el8.10.0+40087+cfe9c127 RLSA-2026:3428 Feb 27, 2026
containers-common · RHEL 8 2:1-82.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
containers-common · almalinux 8 2:1-82.module_el8.10.0+3876+e55593a8 ALSA-2026:3428 Feb 26, 2026
containers-common · ol 8 2:1-82.0.1.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
containers-common · rocky 8 2:1-82.module+el8.10.0+1880+8e896d1b RLSA-2026:3428 Feb 27, 2026
crit · RHEL 8 0:3.18-5.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
crit · almalinux 8 3.18-5.module_el8.10.0+4047+545787c4 ALSA-2026:3428 Feb 26, 2026
crit · ol 8 0:3.18-5.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
criu · RHEL 8 0:3.18-5.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
criu · almalinux 8 3.18-5.module_el8.10.0+4089+ce72bbbe ALSA-2026:3428 Feb 26, 2026
criu · ol 8 0:3.18-5.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
criu · rocky 8 0:3.18-5.module+el8.10.0+2001+6a33db9f RLSA-2026:3428 Feb 27, 2026
criu-devel · RHEL 8 0:3.18-5.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
criu-devel · almalinux 8 3.18-5.module_el8.10.0+4016+efd18bf8 ALSA-2026:3428 Feb 26, 2026
criu-devel · ol 8 0:3.18-5.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
criu-libs · RHEL 8 0:3.18-5.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
criu-libs · almalinux 8 3.18-5.module_el8.10.0+3970+8445edf6 ALSA-2026:3428 Feb 26, 2026
criu-libs · ol 8 0:3.18-5.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
crun · RHEL 8 0:1.14.3-2.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
crun · almalinux 8 1.14.3-2.module_el8.10.0+4120+03ad4b47 ALSA-2026:3428 Feb 26, 2026
crun · ol 8 0:1.14.3-2.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
crun · rocky 8 0:1.14.3-2.module+el8.10.0+1825+623b0c20 RLSA-2026:3428 Feb 27, 2026
ecs-init · amzn 2023 1.82.2-1.amzn2023 ALAS2023-2025-1345 Jan 7, 2026
fuse-overlayfs · RHEL 8 0:1.13-1.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
fuse-overlayfs · almalinux 8 1.13-1.module_el8.10.0+4047+545787c4 ALSA-2026:3428 Feb 26, 2026
fuse-overlayfs · ol 8 0:1.13-1.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
fuse-overlayfs · rocky 8 0:1.13-1.module+el8.10.0+40047+0c0a73f4 RLSA-2026:3428 Feb 27, 2026
golang-logrus · Debian 14 1.9.3-1 DEBIAN-CVE-2025-65637 Dec 4, 2025
google-osconfig-agent · Fedora 43 20260717.00-1.fc43 FEDORA-2026-4A2D23B470 Jul 17, 2026
google-osconfig-agent-debuginfo · Fedora 43 20260717.00-1.fc43 FEDORA-2026-4A2D23B470 Jul 17, 2026
google-osconfig-agent-debugsource · Fedora 43 20260717.00-1.fc43 FEDORA-2026-4A2D23B470 Jul 17, 2026
govulncheck-vulndb · opensuse-leap 15.6 0.0.20260123T022811-150000.1.140.1 SUSE-SU-2026:0292-1 Jan 26, 2026
govulncheck-vulndb · opensuse-leap 16.0 0.0.20260723T184607-160000.1.1 OPENSUSE-SU-2026:21483-1 Jul 30, 2026
libslirp · RHEL 8 0:4.4.0-2.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
libslirp · almalinux 8 4.4.0-2.module_el8.10.0+4023+db236c53 ALSA-2026:3428 Feb 26, 2026
libslirp · ol 8 0:4.4.0-2.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
libslirp · rocky 8 0:4.4.0-2.module+el8.10.0+2001+6a33db9f RLSA-2026:3428 Feb 27, 2026
libslirp-devel · RHEL 8 0:4.4.0-2.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
libslirp-devel · almalinux 8 4.4.0-2.module_el8.10.0+4102+6c76e544 ALSA-2026:3428 Feb 26, 2026
libslirp-devel · ol 8 0:4.4.0-2.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
netavark · RHEL 8 2:1.10.3-1.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
netavark · almalinux 8 2:1.10.3-1.module_el8.10.0+4120+03ad4b47 ALSA-2026:3428 Feb 26, 2026
netavark · ol 8 2:1.10.3-1.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
netavark · rocky 8 2:1.10.3-1.module+el8.10.0+1872+2e18eb19 RLSA-2026:3428 Feb 27, 2026
oci-seccomp-bpf-hook · RHEL 8 0:1.2.10-1.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
oci-seccomp-bpf-hook · almalinux 8 1.2.10-1.module_el8.10.0+4047+545787c4 ALSA-2026:3428 Feb 26, 2026
oci-seccomp-bpf-hook · ol 8 0:1.2.10-1.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
oci-seccomp-bpf-hook · rocky 8 0:1.2.10-1.module+el8.10.0+1825+623b0c20 RLSA-2026:3428 Feb 27, 2026
podman · RHEL 8 4:4.9.4-28.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
podman · almalinux 8 4:4.9.4-28.module_el8.10.0+4120+03ad4b47 ALSA-2026:3428 Feb 26, 2026
podman · ol 8 4:4.9.4-27.0.1.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
podman · rocky 8 4:4.9.4-28.module+el8.10.0+40087+cfe9c127 RLSA-2026:3428 Feb 27, 2026
podman-catatonit · RHEL 8 4:4.9.4-28.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
podman-catatonit · almalinux 8 4:4.9.4-28.module_el8.10.0+4120+03ad4b47 ALSA-2026:3428 Feb 26, 2026
podman-catatonit · ol 8 4:4.9.4-27.0.1.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
podman-docker · RHEL 8 4:4.9.4-28.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
podman-docker · almalinux 8 4:4.9.4-28.module_el8.10.0+4120+03ad4b47 ALSA-2026:3428 Feb 26, 2026
podman-docker · ol 8 4:4.9.4-27.0.1.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
podman-gvproxy · RHEL 8 4:4.9.4-28.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
podman-gvproxy · almalinux 8 4:4.9.4-28.module_el8.10.0+4120+03ad4b47 ALSA-2026:3428 Feb 26, 2026
podman-gvproxy · ol 8 4:4.9.4-27.0.1.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
podman-plugins · RHEL 8 4:4.9.4-28.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
podman-plugins · almalinux 8 4:4.9.4-28.module_el8.10.0+4120+03ad4b47 ALSA-2026:3428 Feb 26, 2026
podman-plugins · ol 8 4:4.9.4-27.0.1.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
podman-remote · RHEL 8 4:4.9.4-28.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
podman-remote · almalinux 8 4:4.9.4-28.module_el8.10.0+4120+03ad4b47 ALSA-2026:3428 Feb 26, 2026
podman-remote · ol 8 4:4.9.4-27.0.1.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
podman-tests · RHEL 8 4:4.9.4-28.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
podman-tests · almalinux 8 4:4.9.4-28.module_el8.10.0+4120+03ad4b47 ALSA-2026:3428 Feb 26, 2026
podman-tests · ol 8 4:4.9.4-27.0.1.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
python-podman · rocky 8 0:4.9.0-3.module+el8.10.0+2001+6a33db9f RLSA-2026:3428 Feb 27, 2026
python3-criu · RHEL 8 0:3.18-5.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
python3-criu · almalinux 8 3.18-5.module_el8.10.0+3970+8445edf6 ALSA-2026:3428 Feb 26, 2026
python3-criu · ol 8 0:3.18-5.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
python3-podman · RHEL 8 0:4.9.0-3.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
python3-podman · almalinux 8 4.9.0-3.module_el8.10.0+4016+efd18bf8 ALSA-2026:3428 Feb 26, 2026
python3-podman · ol 8 0:4.9.0-3.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
runc · RHEL 8 4:1.2.9-3.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
runc · almalinux 8 4:1.2.9-3.module_el8.10.0+4120+03ad4b47 ALSA-2026:3428 Feb 26, 2026
runc · ol 8 4:1.2.9-3.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
runc · rocky 8 4:1.2.9-3.module+el8.10.0+40087+cfe9c127 RLSA-2026:3428 Feb 27, 2026
skopeo · RHEL 8 2:1.14.5-6.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
skopeo · almalinux 8 2:1.14.5-6.module_el8.10.0+4120+03ad4b47 ALSA-2026:3428 Feb 26, 2026
skopeo · ol 8 2:1.14.5-6.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
skopeo · rocky 8 2:1.14.5-6.module+el8.10.0+40087+cfe9c127 RLSA-2026:3428 Feb 27, 2026
skopeo-tests · RHEL 8 2:1.14.5-6.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
skopeo-tests · almalinux 8 2:1.14.5-6.module_el8.10.0+4120+03ad4b47 ALSA-2026:3428 Feb 26, 2026
skopeo-tests · ol 8 2:1.14.5-6.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
slirp4netns · RHEL 8 0:1.2.3-1.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
slirp4netns · almalinux 8 1.2.3-1.module_el8.10.0+4047+545787c4 ALSA-2026:3428 Feb 26, 2026
slirp4netns · ol 8 0:1.2.3-1.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
slirp4netns · rocky 8 0:1.2.3-1.module+el8.10.0+1872+2e18eb19 RLSA-2026:3428 Feb 27, 2026
toolbox · RHEL 8 0:0.0.99.5.1-1.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
toolbox · almalinux 8 0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47 ALSA-2026:3428 Feb 26, 2026
toolbox · rocky 8 0:0.0.99.5.1-1.module+el8.10.0+40087+cfe9c127.rocky.0.2 RLSA-2026:3428 Feb 27, 2026
toolbox-tests · RHEL 8 0:0.0.99.5.1-1.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
toolbox-tests · almalinux 8 0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47 ALSA-2026:3428 Feb 26, 2026
udica · RHEL 8 0:0.2.6-21.module+el8.10.0+23963+b64d8032 RHSA-2026:3428 Mar 12, 2026
udica · almalinux 8 0.2.6-21.module_el8.10.0+4068+0e21408f ALSA-2026:3428 Feb 26, 2026
udica · ol 8 0:0.2.6-21.module+el8.10.0+90820+1c0b9746 ELSA-2026-3428 Feb 26, 2026
udica · rocky 8 0:0.2.6-21.module+el8.10.0+1815+5fe7415e RLSA-2026:3428 Feb 27, 2026

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.