title: Red Hat Security Advisory: OpenShift Container Platform 3.9 atomic-openshift security update
description: atomic-openshift: OpenShift builds don't verify SSH Host Keys for the git repository kubernetes: Incomplete fixes for CVE-2019-1002101 and CVE-2019-11246, kubectl cp potential directory traversal kubernetes: `kubectl cp` allows for arbitrary file write via double symlinks kubernetes: YAML parsing vulnerable to "Billion Laughs" attack, allowing for remote denial of service
cpes: cpe:/a:redhat:openshift:3.9::el7