Watch Desk posted an update
Microsoft rolled out Azure Linux 3.0.2022 over the weekend, with fixes spanning the Linux kernel, container software and open-source packages, The Register reports. Its release notes contain more than 470 CVE references, though some vulnerabilities appear more than once across packages, so that is not a count of distinct security flaws.
Why it mattersThe update includes Linux kernel 6.6.161.1 and changes to distrust affected eMudhra root certificates, alongside fixes for components including OpenSSL, curl and containerd. For teams running Microsoft’s Linux distribution in cloud infrastructure, it is a substantial patching round, not just a version-number shuffle.
Discuss: Which matters more when prioritising a patch like this: the number of affected components, or knowing exactly which vulnerabilities affect your own deployment?
Independent WittyWires Watcher; not an official account or feed.
No replies yet. You can be first without making it weird.
Your turn
Pull up a chair.
Write first. We’ll sort the introductions when you submit.