All pull requests

Pull requests

• refactor(ci): remove privileged rendered-spec comments

  #19681·Tobias Brick (tobiasb-ms) opened Oct 22, 2026Contributor·

  ·
  7

• [Low] Patch python-virtualenv for CVE-2026-102938

  3.0-devPackaging
  #19680·Ratiranjan5 opened Oct 22, 2026·11 of 12 tasks·

  ·
  1

• fix(busybox): address CVE-2023-39810

  #19677·Dan Streetman (ddstreetmicrosoft) opened Oct 22, 2026·

  ·
  16

• kernel: expose read-only Btrfs backing to IPE

  fasttrack/3.0Packagingspecs-extended
  #19674·aadhar-agarwal opened Oct 22, 2026·

  ·
  1

• update(uv): follow Fedora after publishing its Rust prerequisites

  #19671·Dan Streetman (ddstreetmicrosoft) opened Oct 22, 2026·9/9·

  ·
  3

• feat(rust-tar-codec): add after archive and framing dependencies

  #19670·Dan Streetman (ddstreetmicrosoft) opened Oct 22, 2026·8/9·

  ·
  4

• feat(rust-archive-trait): add after rust-cap-std

  #19669·Dan Streetman (ddstreetmicrosoft) opened Oct 22, 2026·7/9·

  ·
  4

• feat(rust-cap-std): add after rust-cap-primitives

  #19668·Dan Streetman (ddstreetmicrosoft) opened Oct 22, 2026·6/9·

  ·
  4

• feat(rust): add cap-primitives and papaya after their prerequisites

  #19667·Dan Streetman (ddstreetmicrosoft) opened Oct 22, 2026·5/9·

  ·
  5

• fix(python*): use explicit python3-* package names instead of aliases

  3.0-devPackaging
  #19661·Daniel McIlvaney (dmcilvaney) opened Oct 22, 2026Contributor·

  ·
  2

• [AUTOPATCHER-CORE] Upgrade unbound to 1.26.2 for CVE-2026-35501, CVE-2026-50106, CVE-2026-96405, CVE-2026-97206 and CVE-2026-109125

  AutoUpgrade CoreCVE-fixed-by-upgradeCVEFixReadyForMaintainerReviewfasttrack/3.0Packagingsecurity
  #19648·azurelinux-ci-jwt-app[bot] opened Oct 21, 2026Bot·

  ·
  3

• [AutoPR- Security] Patch openssh for CVE-2026-110927, CVE-2026-110926, CVE-2026-110924, CVE-2026-110923 [MEDIUM]

  3.0-devAI BackportAutoPR-SecurityPackagingsecurity
  #19645·Azure Linux Security Servicing Account (azurelinux-security) opened Oct 21, 2026·12 tasks done·

  ·
  1

• Kernel upgrade to 6.6.159.1 version

  3.0-devPackagingspecs-extendedTools
  #19642·Rachel Menge (rlmenge) opened Oct 21, 2026Contributor·

  ·
  1

• [High] Patch etcd for CVE-2026-97032, CVE-2026-78669, CVE-2026-78663, CVE-2026-78660, CVE-2026-78659

  fasttrack/3.0Packagingsecurity
  #19641·jykanase opened Oct 21, 2026·12 tasks done·

  ·
  4

• fix(expat): upgrade to 2.9.0 to address CVEs

  #19640·Kanishk Bansal (Kanishk-Bansal) opened Oct 21, 2026·

  ·
  4

• feat(images): enable Microsoft build of Go telemetry in first-party base images

  #19639·George Adams (gdams) opened Oct 21, 2026Member·7 tasks done·

  ·
  9

• [AutoPR- Security] Patch libmspack for CVE-2026-110602 [MEDIUM]

  3.0-devAutoPR-SecurityPackagingsecurity
  #19638·Azure Linux Security Servicing Account (azurelinux-security) opened Oct 21, 2026·12 tasks done·

  ·
  1

• fix(grub2): embed TPM in aarch64 EFI images

  #19637·Ernie Pistor (epistor) opened Oct 21, 2026·

  ·
  2

• [AutoPR- Security] Patch nfs-utils for CVE-2026-89098 [MEDIUM]

  3.0-devAutoPR-SecurityPackagingready-for-stable-reviewsecurity
  #19636·Azure Linux Security Servicing Account (azurelinux-security) opened Oct 21, 2026·12 tasks done·

  ·
  6

• [Critical] Patch keda for CVE-2026-77524 (Breaking Change)

  fasttrack/3.0Packagingsecurity
  #19633·Akhila Guruju (akhila-guruju) opened Oct 21, 2026·11 of 12 tasks·

  ·
  2

• fix(rust-coreutils): remove bootstrap dependency pins

  #19631·Christopher Co (christopherco) opened Oct 21, 2026Collaborator·3/3·

  ·
  1

• feat: import remaining coreutils utility crates

  #19630·Christopher Co (christopherco) opened Oct 21, 2026Collaborator·2/3·

  ·
  8

• fix(kiwi): use mapping for runtime override

  #19616·Daniel McIlvaney (dmcilvaney) opened Oct 20, 2026Contributor·

  ·
  10

• Patch cifs-utils for CVE-2026-104715

  3.0-devPackaging
  #19615·SeanDougherty opened Oct 20, 2026·7 of 8 tasks·

  ·

• [AutoPR- Security] Patch aspell for CVE-2026-75820, CVE-2026-75819, CVE-2026-75818, CVE-2026-103658 [MEDIUM]

  3.0-devAutoPR-SecurityPackagingready-for-stable-reviewsecurity
  #19614·Azure Linux Security Servicing Account (azurelinux-security) opened Oct 20, 2026·12 tasks done·

  ·
  2