In a report by The Register, Microsoft has released a significant update for Azure Linux, addressing more than 470 Common Vulnerabilities and Exposures in a single deployment.
The update, version 3.0.20261105-3.0, includes patches for the Linux kernel, container software and various open source packages. Key components receiving security fixes include OpenSSL, curl, Kubernetes, Docker and QEMU. The Linux kernel has been upgraded to version 6.6.161.1. Additionally, Microsoft addressed the eMudhra certificate incident by removing or distrusting specific root certificates and implementing new validation checks within Python and Go. The release also features operational improvements, such as systemd hang fixes and updates to GRUB Secure Boot metadata. This extensive patching effort arrives during a period of increased vulnerability discovery, which some industry observers attribute to AI-assisted research. While Linux creator Linus Torvalds has noted potential signs of a decline in the flood of AI-prompted patches for the kernel, the broader software industry continues to face a heavy workload. Azure Linux, formerly known as CBL-Mariner, serves as the foundation for Microsoft cloud infrastructure, making the maintenance of its security posture a critical priority for the company.
Source: The Register
