Microsoft patches 470 vulnerabilities in Azure Linux in a single update

Microsoft has released Azure Linux update 3.0.20261105-3.0, which fixes more than 470 vulnerabilities at once. The patches cover the Linux kernel (now 6.6.161.1), OpenSSL, curl, Kubernetes, Docker and QEMU. Separately, the company dealt with the incident involving the eMudhra certificate authority: its root certificates were removed or are no longer trusted, and new checks were added to Python and Go. The update also fixes systemd hangs and refreshes GRUB metadata for Secure Boot. Part of the industry links this volume of fixes to a wave of findings fueled by AI tools for vulnerability research. For Microsoft this is an important update: Azure Linux, formerly CBL-Mariner, underpins its cloud infrastructure.