azurelinux
azurelinux copied to clipboard
microsoft
Linux OS for Azure 1P services and edge appliances
Updating the kata config for lcow. Not tested. ###### Merge Checklist **All** boxes should be checked before merging the PR *(just tick any boxes which don't apply to this PR)*...
**Describe the bug** Image mcr.microsoft.com/azurelinux/distroless/nodejs:20 contains Vulnerability CVE-2025-64756 **To Reproduce** **Expected behavior** Expect the vulnerability to be fixed in all nodejs packages **Screenshots** If applicable, add screenshots or log outputs...
Hi, we are getting flagged for [CVE-2024-21538](https://scout.docker.com/vulnerabilities/id/CVE-2024-21538?s=github&n=cross-spawn&t=npm&vr=%3e%3D7.0.0%2c%3c7.0.5&utm_source=desktop&utm_medium=ExternalLink) vulnerability. We are using the image - mcr.microsoft.com/cbl-mariner/base/nodejs:18 Could you please provide an estimated timeline for the fix?
vitess and cloud-provider-kubevirt [1] [2] depend on github.com/dave/gopackages which does not include any license. [3] dcos-cli [4] depend on github.com/dcos/client-go which is marked as experimental (as per their README [5])...
###### Merge Checklist **All** boxes should be checked before merging the PR *(just tick any boxes which don't apply to this PR)* - [ ] The toolchain has been rebuilt...
###### Merge Checklist **All** boxes should be checked before merging the PR *(just tick any boxes which don't apply to this PR)* - [ ] The toolchain has been rebuilt...
###### Merge Checklist **All** boxes should be checked before merging the PR *(just tick any boxes which don't apply to this PR)* - [x] The toolchain has been rebuilt successfully...
###### Merge Checklist **All** boxes should be checked before merging the PR *(just tick any boxes which don't apply to this PR)* - [x] The toolchain has been rebuilt successfully...
Azure Linux 3.0 now supports AppArmor in the [20251107](https://github.com/Azure/AgentBaker/releases/tag/v0.20251107.1) AKS node image release. Track the rollout of the 20251107 release [here](https://releases.aks.azure.com/).
###### Merge Checklist **All** boxes should be checked before merging the PR *(just tick any boxes which don't apply to this PR)* - [x] The toolchain has been rebuilt successfully...
