Patch release notes for 4.9.8

Author: kcarmichael08

modules/bug-fixes-in-version-498.adoc

@@ -0,0 +1,23 @@
+// Module included in the following assemblies:
+//
+// * release_notes/49-release-notes.adoc
+
+:_mod-docs-content-type: REFERENCE
+[id="about-this-release-498_{context}"]
+= About release 4.9.8
+
+[role="_abstract"]
+This release contains fixes to address security vulnerabilities.
+
+*Release date*: {ga-date-498}
+
+This release addresses the following security vulnerabilities:
+
+//ROX-35018
+* golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (link:https://access.redhat.com/security/cve/CVE-2026-46595[CVE-2026-46595])
+
+//ROX-35022
+* golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (link:https://access.redhat.com/security/cve/CVE-2026-39821[CVE-2026-39821])
+
+//ROX-35139
+* golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (link:https://access.redhat.com/security/cve/CVE-2026-42508[CVE-2026-42508])

modules/common-attributes.adoc

@@ -62,7 +62,7 @@ endif::[]
 :product-registry: OpenShift image registry
 :olm-first: Operator Lifecycle Manager (OLM)
 :olm: OLM
-:rhacs-version: 4.9.7
+:rhacs-version: 4.9.8
 :ga-date-490: 30 October 2025
 :ga-date-491: 24 November 2025
 :ga-date-492: 16 December 2025
@@ -71,6 +71,7 @@ endif::[]
 :ga-date-495: 8 April 2026
 :ga-date-496: 6 May 2026
 :ga-date-497: 2 June 2026
+:ga-date-498: 18 June 2026
 :ocp-supported-version: 4.12
 :ocp-latest-version: 4.21
 :pipelines-shortname: OpenShift Pipelines

release_notes/49-release-notes.adoc

@@ -23,8 +23,7 @@ toc::[]
 |`4.9.5` | {ga-date-495}
 |`4.9.6` | {ga-date-496}
 |`4.9.7` | {ga-date-497}
-
-
+|`4.9.8` | {ga-date-498}
 
 |====
 
@@ -743,4 +742,6 @@ This release addresses the following security vulnerabilities:
 //ROX-34736
 * Go crypto/x509: Denial of service via inefficient certificate chain validation (link:https://access.redhat.com/security/cve/CVE-2026-32281[CVE-2026-32281])
 
+include::modules/bug-fixes-in-version-498.adoc[leveloffset=+1]
+
 include::modules/image-versions.adoc[leveloffset=+1]