Microsoft's Azure Linux 3.0.2022 carries more than 470 security fix references, so businesses running it in the cloud should check they are on the new version.
Microsoft has released Azure Linux 3.0.2022, an update that lists more than 470 security fix references in one go. It went out over the weekend. If your business runs cloud software on Azure Linux, this is one to check, because unpatched flaws give attackers a way in.
Security flaws are tracked with public ID numbers called CVEs. Microsoft's release notes contain more than 470 of them. Some appear more than once because the same flaw affects several software packages, so the count is not 470 separate holes. It is still a very large batch.
The fixes cover OpenSSL, curl, Kubernetes, Docker and QEMU, along with many other building blocks of modern Linux systems. The core of the system, the Linux kernel, moves to version 6.6.161.1. Container tools get attention too, including KubeVirt, containerd and Docker Compose. Containers are the packaged units that run many cloud services.
The update also deals with the eMudhra certificate incident, tracked as CVE-2026-114406. Certificates are what let your software trust that a website is the real one. Microsoft removed or distrusted root certificates that could vouch for compromised eMudhra certificates. It also added checks in Python and Go to reject the affected ones. It kept SSL.com trust in place where needed.
Azure Linux, formerly called CBL-Mariner, is Microsoft's own Linux system. It was built mainly for Microsoft's cloud infrastructure and services. The small version-number bump hides how many parts it keeps patched. Teams that run workloads on it are the ones who need to act.
The release comes during a surge in discovered vulnerabilities, which The Register ties to AI. Linus Torvalds, who created Linux, said fixes are now arriving faster than new bug reports in one part of the kernel, called eBPF. He noted that most other areas have not reached that point. Microsoft has not said whether AI-assisted research found any of the flaws in this release.
If you run workloads on Azure Linux, confirm you are on version 3.0.2022 so the new security fixes are actually in place.
A Financial Times report says a Southeast Asia data center pitch told Chinese investors getting Nvidia chips was easy. Supply claims like that deserve a hard look.
Read more: Data center pitch to Chinese investors claimed easy access to Nvidia chipsCompanies building AI data centers owe about $1 trillion, and rising US bond yields could make refinancing the debt coming due much costlier.
Read more: AI data center builders may soon pay much more to borrow moneyA Google Cloud survey of 1,250 US decision-makers says older, locally installed software is delaying or killing AI projects at nearly half of companies.
Read more: Old software is slowing down company AI plans, survey finds
