Technology news and discussion on TalkFuse.
Microsoft’s Azure Linux update lists over 470 CVE references across packages
Microsoft released Azure Linux 3.0.2022 with more than 470 CVE references, highlighting the continuing workload of keeping the software underpinning cloud services secure. The count includes repeated references to flaws affecting different packages, so it does not represent 470 distinct vulnerabilities.
The update covers the Linux kernel, now version 6.6.161.1, and packages including OpenSSL, curl, Kubernetes, Docker and QEMU. It also addresses trust in certificates affected by the eMudhra incident, adds container infrastructure fixes and includes changes to Dockerfiles, confidential computing support, systemd and GRUB. Microsoft did not say whether AI-assisted research contributed to the vulnerabilities.
In short
- Azure Linux 3.0.2022 lists more than 470 CVE references.
- Repeated entries mean the count is not 470 distinct flaws.
- The update spans kernel, container and certificate fixes.
Read the full article at the source →
Originally published by The Register as “Microsoft’s Azure Linux gets 470-plus security fixes in one almighty patching session”.