8 matches found
AZL-88332 CVE-2026-39835 affecting package telegraf for versions less than 1.31.0-23
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil...
AZL-87465 CVE-2026-39835 affecting package cf-cli for versions less than 8.7.11-7
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil...
AZL-87912 CVE-2026-39835 affecting package kubernetes for versions less than 1.30.10-25
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil...
AZL-87627 CVE-2026-39835 affecting package docker-buildx for versions less than 0.14.0-15
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil...
AZL-88071 CVE-2026-39835 affecting package moby-engine for versions less than 25.0.3-18
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil...
AZL-87768 CVE-2026-39835 affecting package gh for versions less than 2.62.0-17
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil...
AZL-87308 CVE-2026-39835 affecting package podman 5.6.1-9
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil...
AZL-87191 CVE-2026-39835 affecting package buildah 1.43.1-2
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil...