AZL-87326 CVE-2026-46595 affecting package podman 5.6.1-9

Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped...

AZL-87975 CVE-2026-39835 affecting package kubevirt for versions less than 1.7.1-7

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil...