title: Red Hat Security Advisory: Red Hat OpenShift Logging Security and Bug update Release 5.4.1
description: netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way netty: control chars in header names may lead to HTTP request smuggling prometheus/client_golang: Denial of service using InstrumentHandlerCounter
cpes: cpe:/a:redhat:logging:5.4::el8