This commit fixes a potential denial of service vulnerability in logrus.Writer() that could be triggered by logging text longer than 64kb without newlines. by @ozfive in https://github.com/sirupsen/logrus/pull/1376
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | require | patch | `v1.9.0` -> `v1.9.3` |
---
### Release Notes
<details>
<summary>sirupsen/logrus</summary>
### [`v1.9.3`](https://github.com/sirupsen/logrus/releases/v1.9.3)
[Compare Source](https://github.com/sirupsen/logrus/compare/v1.9.2...v1.9.3)
- Fix a potential denial of service vulnerability in logrus.Writer() that could be triggered by logging text longer than 64kb without newlines https://github.com/sirupsen/logrus/commit/f9291a534cac1466d26414fd9e326381cd64ecef (re-apply https://github.com/sirupsen/logrus/pull/1376)
- Fix panic in Writer https://github.com/sirupsen/logrus/commit/d40e25cd45ed9c6b2b66e6b97573a0413e4c23bd
**Full Changelog**: https://github.com/sirupsen/logrus/compare/v1.9.2...v1.9.3
### [`v1.9.2`](https://github.com/sirupsen/logrus/releases/v1.9.2)
[Compare Source](https://github.com/sirupsen/logrus/compare/v1.9.1...v1.9.2)
- Revert https://github.com/sirupsen/logrus/pull/1376, which introduced a regression in v1.9.1
**Full Changelog**: https://github.com/sirupsen/logrus/compare/v1.9.1...v1.9.2
### [`v1.9.1`](https://github.com/sirupsen/logrus/releases/v1.9.1)
[Compare Source](https://github.com/sirupsen/logrus/compare/v1.9.0...v1.9.1)
#### What's Changed
- Fix data race in hooks.test package by [@​FrancoisWagner](https://github.com/FrancoisWagner) in https://github.com/sirupsen/logrus/pull/1362
- Add instructions to use different log levels for local and syslog by [@​tommyblue](https://github.com/tommyblue) in https://github.com/sirupsen/logrus/pull/1372
- This commit fixes a potential denial of service vulnerability in logrus.Writer() that could be triggered by logging text longer than 64kb without newlines. by [@​ozfive](https://github.com/ozfive) in https://github.com/sirupsen/logrus/pull/1376
- Use text when shows the logrus output by [@​xieyuschen](https://github.com/xieyuschen) in https://github.com/sirupsen/logrus/pull/1339
#### New Contributors
- [@​FrancoisWagner](https://github.com/FrancoisWagner) made their first contribution in https://github.com/sirupsen/logrus/pull/1362
- [@​tommyblue](https://github.com/tommyblue) made their first contribution in https://github.com/sirupsen/logrus/pull/1372
- [@​ozfive](https://github.com/ozfive) made their first contribution in https://github.com/sirupsen/logrus/pull/1376
- [@​xieyuschen](https://github.com/xieyuschen) made their first contribution in https://github.com/sirupsen/logrus/pull/1339
**Full Changelog**: https://github.com/sirupsen/logrus/compare/v1.9.0...v1.9.1
</details>
---
### Configuration
📅 **Schedule**: At any time (no schedule defined).
🚦 **Automerge**: Disabled due to failing status checks.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, click this checkbox.
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
CSRBot
changed title from chore(deps): update module github.com/sirupsen/logrus to v1.9.2 to chore(deps): update module github.com/sirupsen/logrus to v1.9.32023-06-08 11:31:35 +02:00
Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.
♻ Renovate will retry this branch, including artifacts, only when one of the following happens:
any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually
The artifact failure details are included below:
File name: go.sum
external-host-error
### ⚠ Artifact update problem
Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.
♻ Renovate will retry this branch, including artifacts, only when one of the following happens:
- any of the package files in this branch needs updating, or
- the branch becomes conflicted, or
- you click the rebase/retry checkbox if found above, or
- you rename this PR's title to start with "rebase!" to trigger it manually
The artifact failure details are included below:
##### File name: go.sum
```
external-host-error
```
CSRBot
changed title from chore(deps): update module github.com/sirupsen/logrus to v1.9.3 to chore(deps): update module github.com/sirupsen/logrus to v1.9.3 - autoclosed2023-07-08 19:52:05 +02:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
v1.9.0->v1.9.3Release Notes
sirupsen/logrus
v1.9.3Compare Source
Full Changelog: https://github.com/sirupsen/logrus/compare/v1.9.2...v1.9.3
v1.9.2Compare Source
Full Changelog: https://github.com/sirupsen/logrus/compare/v1.9.1...v1.9.2
v1.9.1Compare Source
What's Changed
New Contributors
Full Changelog: https://github.com/sirupsen/logrus/compare/v1.9.0...v1.9.1
Configuration
📅 Schedule: At any time (no schedule defined).
🚦 Automerge: Disabled due to failing status checks.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.
e72424e79cto23dfe1f40dchore(deps): update module github.com/sirupsen/logrus to v1.9.2to chore(deps): update module github.com/sirupsen/logrus to v1.9.323dfe1f40dtof46285aceff46285aceftob52668dfa4b52668dfa4to9a1a3d993c9a1a3d993ctoaa135893cc⚠ Artifact update problem
Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.
♻ Renovate will retry this branch, including artifacts, only when one of the following happens:
The artifact failure details are included below:
File name: go.sum
aa135893ccto58a0276213chore(deps): update module github.com/sirupsen/logrus to v1.9.3to chore(deps): update module github.com/sirupsen/logrus to v1.9.3 - autoclosedPull request closed