# Microsoft’s Azure Linux update lists over 470 CVE references across packages

- URL: https://talkfuse.com/story/microsofts-azure-linux-gets-470-plus-security-fixes-in-one-almighty-patching-session/
- Published: 2026-11-09T15:02:00+00:00
- Updated: 2026-11-09T15:58:39+00:00
- Original publisher: The Register
- Original article: https://www.theregister.com/security/2026/11/09/microsofts-azure-linux-gets-470-plus-security-fixes-in-one-almighty-patching-session/5308434
- Topics: Software

## Key points

- Azure Linux 3.0.2022 lists more than 470 CVE references.
- Repeated entries mean the count is not 470 distinct flaws.
- The update spans kernel, container and certificate fixes.

## Summary

Microsoft released Azure Linux 3.0.2022 with more than 470 CVE references, highlighting the continuing workload of keeping the software underpinning cloud services secure. The count includes repeated references to flaws affecting different packages, so it does not represent 470 distinct vulnerabilities.

The update covers the Linux kernel, now version 6.6.161.1, and packages including OpenSSL, curl, Kubernetes, Docker and QEMU. It also addresses trust in certificates affected by the eMudhra incident, adds container infrastructure fixes and includes changes to Dockerfiles, confidential computing support, systemd and GRUB. Microsoft did not say whether AI-assisted research contributed to the vulnerabilities.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.