title: Red Hat Security Advisory: OpenShift Container Platform 4.9.0 packages and security update
description: coreos-installer: restrict access permissions on /boot/ignition{,/config.ign} jetty: requests to the ConcatServlet and WelcomeFilter are able to access protected resources within the WEB-INF directory golang: archive/zip: malformed archive may cause panic or memory exhaustion jetty: SessionListener can prevent a session from being invalidated breaking logout openvswitch: use-after-free in decode_NXAST_RAW_ENCAP during the decoding of a RAW_ENCAP action
cpes: cpe:/a:redhat:openshift:4.9::el7 cpe:/a:redhat:openshift:4.9::el8