Microsoft's Azure Linux gets 470-plus security fixes in one almighty patching session
A mountain of CVEs, a certificate cleanup, and yet more work for Microsoft's patching teams
Microsoft has released a massive update for its Azure Linux distribution, fixing over 470 security vulnerabilities in a single release. This update, Azure Linux 3.0.2022, encompasses fixes for the Linux kernel, open-source packages, and container software. Microsoft's release notes contain more than 470 CVE references, although some vulnerabilities may appear multiple times due to their impact on different packages.
The generic Linux kernel has been updated to version 6.6.161.1, and the update also addresses the eMudhra certificate incident. Container infrastructure receives significant attention, with fixes for KubeVirt, containerd, Docker Compose, and other components. The update also includes less security-focused changes, such as new Dockerfiles, an OpenVMM patch for confidential computing support, and adjustments to GRUB Secure Boot metadata.
The release comes amidst an AI-fueled surge in vulnerability discovery, but it remains unclear if artificial intelligence contributed to the vulnerabilities addressed in this update. Azure Linux, formerly known as CBL-Mariner, is Microsoft's own Linux distribution primarily developed for its cloud infrastructure and services.
Written by urgent.news from The Register Science's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
