microsoft/azurelinux issues and pull requests

#18996 - [AutoPR- Security] Patch hdf5 for CVE-2026-19026, CVE-2026-19025, CVE-2025-2309, CVE-2025-2308 [MEDIUM]

Pull Request - State: open - Opened by azurelinux-security about 1 month ago - 1 comment
Labels: security, Packaging, 3.0-dev, AutoPR-Security, AI Backport

#18992 - [AutoPR- Security] Patch alsa-lib for CVE-2026-90781 [MEDIUM]

Pull Request - State: open - Opened by azurelinux-security about 1 month ago - 1 comment
Labels: security, Packaging, 3.0-dev, AutoPR-Security, ready-for-stable-review

#18980 - [AUTOUPGRADE-CORE] Upgrade ca-certificates Msft cert change

Pull Request - State: open - Opened by azurelinux-ci-jwt-app[bot] about 1 month ago - 1 comment
Labels: Packaging, AutoUpgrade Core, 3.0-dev

#18978 - [AutoPR- Security] Patch fluent-bit for CVE-2026-69186, CVE-2026-69184 [MEDIUM]

Pull Request - State: open - Opened by azurelinux-security about 1 month ago - 2 comments
Labels: security, Packaging, 3.0-dev, AutoPR-Security, AI Backport

#18956 - [Medium] Patch `azurelinux-image-tools` for CVE-2026-81870, CVE-2026-81871, CVE-2026-81872

Pull Request - State: open - Opened by v-aaditya about 1 month ago - 3 comments
Labels: security, Packaging, 3.0-dev, ready-for-stable-review

#18932 - [AutoPR- Security] Patch binutils for CVE-2026-91781 [LOW]

Pull Request - State: closed - Opened by azurelinux-security about 1 month ago - 3 comments
Labels: security, Packaging, 3.0-dev, AutoPR-Security, ready-for-stable-review

#18929 - [AutoPR- Security] Patch perl for CVE-2026-82560 [MEDIUM]

Pull Request - State: open - Opened by azurelinux-security about 1 month ago - 5 comments
Labels: security, Packaging, 3.0-dev, AutoPR-Security, AI Backport, ready-for-stable-review

#18921 - Update SymCrypt-OpenSSL to 1.10.2

Pull Request - State: open - Opened by mamckee about 1 month ago - 1 comment
Labels: Packaging, 3.0-dev

#18887 - [AUTO-CHERRYPICK] [AUTOPATCHER-CORE] Upgrade gh to 2.101.0 for CVE-2026-84445, CVE-2026-84304, CVE-2026-56855, CVE-2026-78662, CVE-2026-72924 - branch 3.0-dev

Pull Request - State: open - Opened by azurelinux-ci-jwt-app[bot] about 1 month ago - 3 comments
Labels: Packaging, Auto Fast-track Cherry-pick, 3.0-dev

#18874 - [AutoPR- Security] Patch moby-containerd-cc for CVE-2026-53495 [MEDIUM]

Pull Request - State: open - Opened by azurelinux-security about 1 month ago - 2 comments
Labels: security, Packaging, 3.0-dev, AutoPR-Security, AI Backport

#18872 - [AutoPR- Security] Patch nmap for CVE-2026-89160, CVE-2026-89157 [MEDIUM]

Pull Request - State: closed - Opened by azurelinux-security about 1 month ago - 5 comments
Labels: security, Packaging, 3.0-dev, AutoPR-Security, ready-for-stable-review

#18865 - [AutoPR- Security] Patch libvirt for CVE-2026-77159 [MEDIUM]

Pull Request - State: closed - Opened by azurelinux-security about 1 month ago - 3 comments
Labels: security, Packaging, 3.0-dev, AutoPR-Security, ready-for-stable-review

#18856 - Patch logrotate with SELinux support

Pull Request - State: closed - Opened by btray900 about 1 month ago - 1 comment
Labels: Packaging, 3.0-dev

#18814 - [AutoPR- Security] Patch python3 for CVE-2026-17084 [MEDIUM]

Pull Request - State: closed - Opened by azurelinux-security about 2 months ago - 5 comments
Labels: security, Packaging, 3.0-dev, AutoPR-Security, ready-for-stable-review

#18739 - [AutoPR- Security] Patch popt for CVE-2026-18743 [LOW]

Pull Request - State: open - Opened by azurelinux-security about 2 months ago - 4 comments
Labels: security, Packaging, 3.0-dev, AutoPR-Security, ready-for-stable-review

#18735 - [AutoPR- Security] Patch rsync for CVE-2026-18743 [LOW]

Pull Request - State: open - Opened by azurelinux-security about 2 months ago - 7 comments
Labels: security, Packaging, 3.0-dev, AutoPR-Security, AI Backport, ready-for-stable-review

#18683 - [AutoPR- Security] Patch tar for CVE-2026-5704 [MEDIUM]

Pull Request - State: open - Opened by azurelinux-security about 2 months ago - 8 comments
Labels: security, Packaging, 3.0-dev, AutoPR-Security, AI Backport

#18653 - systemd: lock disks while running filesystem checks

Pull Request - State: open - Opened by PawelWMS 2 months ago
Labels: Packaging, 3.0-dev

#18650 - cloud-hypervisor: upgrade to 52.0.152

Pull Request - State: open - Opened by Redent0r 2 months ago
Labels: Packaging, 3.0-dev

#18645 - chore: bump toolkit to go 1.25 to fix CVEs

Pull Request - State: open - Opened by mfrw 2 months ago
Labels: documentation, Tools, 3.0-dev

#18644 - tracelogging: Modifying patch file containing the %check

Pull Request - State: closed - Opened by kgodara912 2 months ago - 1 comment
Labels: Packaging, 3.0-dev

#18642 - [AutoPR- Security] Patch ntfs-3g for CVE-2026-56136, CVE-2026-56135 [MEDIUM]

Pull Request - State: closed - Opened by azurelinux-security 2 months ago - 1 comment
Labels: security, Packaging, 3.0-dev, AutoPR-Security, ready-for-stable-review

#18640 - systemd: serialize generated initrd fsck device probes

Pull Request - State: open - Opened by PawelWMS 2 months ago
Labels: Packaging, 3.0-dev

#18639 - systemd: serialize initrd root fsck with a drop-in

Pull Request - State: open - Opened by PawelWMS 2 months ago
Labels: Packaging, 3.0-dev

#18631 - [AUTO-CHERRYPICK] Unrevert rust change and integrate with kata-containers-cc - branch 3.0-dev

Pull Request - State: open - Opened by azurelinux-ci-jwt-app[bot] 2 months ago - 2 comments
Labels: Packaging, specs-extended, Auto Fast-track Cherry-pick, 3.0-dev

#18630 - fix(openssl): backport EVP_PKEY_Q_keygen support

Pull Request - State: closed - Opened by corvus-callidus 2 months ago
Labels: Packaging, 3.0-dev

#18623 - kernel-uvm: upgrade to 6.6.152.mshv1

Pull Request - State: open - Opened by Redent0r 2 months ago
Labels: Packaging, 3.0-dev

#18622 - [3.0] Enable CONFIG_PCI_P2PDMA, CONFIG_VFIO_PCI_DMABUF, CONFIG_IOMMUFD and CONFIG_IOMMUFD_VFIO_CONTAINER to support GPU pass-thru on arm64

Pull Request - State: open - Opened by henryli001 2 months ago
Labels: Packaging, Tools, 3.0-dev

#18618 - cloud-hypervisor: upgrade to 52.0.151

Pull Request - State: closed - Opened by Redent0r 2 months ago - 1 comment
Labels: Packaging, 3.0-dev

#18613 - kata-containers: upgrade to 4.1.0

Pull Request - State: open - Opened by Redent0r 2 months ago - 2 comments
Labels: Packaging, 3.0-dev

#18612 - [AUTO-CHERRYPICK] [AutoPR- Security] Patch libgit2 for CVE-2026-53587, CVE-2026-53586, CVE-2026-53585, CVE-2026-53584, CVE-2026-53583 [HIGH] - branch 3.0-dev

Pull Request - State: open - Opened by azurelinux-ci-jwt-app[bot] 2 months ago - 4 comments
Labels: Packaging, Auto Fast-track Cherry-pick, 3.0-dev

#18611 - [AUTO-CHERRYPICK] [AUTOPATCHER-CORE] Upgrade python-webob to 1.8.11 for CVE-2026-54770 - branch 3.0-dev

Pull Request - State: closed - Opened by azurelinux-ci-jwt-app[bot] 2 months ago - 2 comments
Labels: Packaging, Auto Fast-track Cherry-pick, 3.0-dev

#18610 - [AUTO-CHERRYPICK] libarrow: rebuild for thrift 0.24.0 - branch 3.0-dev

Pull Request - State: closed - Opened by azurelinux-ci-jwt-app[bot] 2 months ago - 2 comments
Labels: Packaging, Auto Fast-track Cherry-pick, 3.0-dev

#18609 - [AUTO-CHERRYPICK] [AutoPR- Security] Patch expat for CVE-2026-76957, CVE-2026-76956, CVE-2026-76641, CVE-2026-66046 [HIGH] - branch 3.0-dev

Pull Request - State: closed - Opened by azurelinux-ci-jwt-app[bot] 2 months ago - 2 comments
Labels: Packaging, Auto Fast-track Cherry-pick, 3.0-dev

#18608 - [AUTO-CHERRYPICK] [AutoPR- Security] Patch python-lxml for CVE-2026-49825 [HIGH] - branch 3.0-dev

Pull Request - State: closed - Opened by azurelinux-ci-jwt-app[bot] 2 months ago - 2 comments
Labels: Packaging, Auto Fast-track Cherry-pick, 3.0-dev

#18607 - [AUTO-CHERRYPICK] [AutoPR- Security] Patch packer for CVE-2026-19589 [HIGH] - branch 3.0-dev

Pull Request - State: closed - Opened by azurelinux-ci-jwt-app[bot] 2 months ago - 2 comments
Labels: Packaging, Auto Fast-track Cherry-pick, 3.0-dev

#18606 - [AUTO-CHERRYPICK] [AUTOPATCHER-CORE] Upgrade perl-DBI to 1.652 for CVE-2026-73193, CVE-2026-73194 - branch 3.0-dev

Pull Request - State: closed - Opened by azurelinux-ci-jwt-app[bot] 2 months ago - 2 comments
Labels: Packaging, Auto Fast-track Cherry-pick, 3.0-dev

#18605 - [AUTO-CHERRYPICK] [AUTOPATCHER-CORE] Upgrade perl-HTTP-Date to 6.08 for CVE-2026-14741 - branch 3.0-dev

Pull Request - State: closed - Opened by azurelinux-ci-jwt-app[bot] 2 months ago - 2 comments
Labels: Packaging, Auto Fast-track Cherry-pick, 3.0-dev

#18604 - lttng: backport lttng-tools and lttng-ust 2.14.0 to 3.0

Pull Request - State: open - Opened by Ankita13-code 2 months ago
Labels: Packaging, 3.0-dev

#18600 - [AutoPR- Security] Patch libsoup for CVE-2026-77014 [MEDIUM]

Pull Request - State: open - Opened by azurelinux-security 2 months ago - 1 comment
Labels: security, Packaging, 3.0-dev, AutoPR-Security, AI Backport

#18599 - [AutoPR- Security] Patch libvirt for CVE-2026-18917 [MEDIUM]

Pull Request - State: closed - Opened by azurelinux-security 2 months ago - 1 comment
Labels: security, Packaging, 3.0-dev, AutoPR-Security, ready-for-stable-review

#18596 - Renaming patch file to avoid module start name

Pull Request - State: closed - Opened by kgodara912 2 months ago
Labels: Packaging, 3.0-dev

#18595 - kata-containers-cc: use smaller vendored tarball.

Pull Request - State: closed - Opened by nbojanic 2 months ago - 1 comment
Labels: Packaging, 3.0-dev

#18571 - [AutoPR- Security] Patch keda for CVE-2026-53572 [MEDIUM]

Pull Request - State: open - Opened by azurelinux-security 2 months ago - 2 comments
Labels: security, Packaging, 3.0-dev, AutoPR-Security, AI Backport

#18570 - [AutoPR- Security] Patch vitess for CVE-2026-65959 [MEDIUM]

Pull Request - State: closed - Opened by azurelinux-security 2 months ago - 3 comments
Labels: security, Packaging, 3.0-dev, AutoPR-Security, AI Backport, ready-for-stable-review

#18568 - [AutoPR- Security] Patch emacs for CVE-2026-77219 [MEDIUM]

Pull Request - State: closed - Opened by azurelinux-security 2 months ago - 1 comment
Labels: security, Packaging, 3.0-dev, AutoPR-Security, ready-for-stable-review

#18566 - Upgrade `libgcrypt` to version `1.11.3` and `libgpg-error` to version `1.49`

Pull Request - State: open - Opened by v-aaditya 2 months ago - 10 comments
Labels: Packaging, 3.0-dev, package-upgrade

#18563 - [AutoPR- Security] Patch influxdb for CVE-2026-72816 [MEDIUM]

Pull Request - State: open - Opened by azurelinux-security 2 months ago - 10 comments
Labels: security, Packaging, 3.0-dev, AutoPR-Security, AI Backport, ready-for-stable-review

#18561 - [AutoPR- Security] Patch bluez for CVE-2026-75032 [MEDIUM]

Pull Request - State: closed - Opened by azurelinux-security 2 months ago - 2 comments
Labels: security, Packaging, 3.0-dev, AutoPR-Security, AI Backport, ready-for-stable-review

#18558 - [AUTO-CHERRYPICK] rust: Upgrade to 1.96.1 - branch 3.0-dev

Pull Request - State: open - Opened by azurelinux-ci-jwt-app[bot] 2 months ago - 6 comments
Labels: Packaging, specs-extended, Auto Fast-track Cherry-pick, 3.0-dev

#18556 - [AutoPR- Security] Patch pytorch for CVE-2026-63632 [LOW]

Pull Request - State: closed - Opened by azurelinux-security 2 months ago - 1 comment
Labels: security, Packaging, 3.0-dev, AutoPR-Security, ready-for-stable-review

#18551 - build(deps): bump the actions group across 1 directory with 4 updates

Pull Request - State: open - Opened by dependabot[bot] 2 months ago - 2 comments
Labels: dependencies, 3.0-dev

#18465 - [AutoPR- Security] Patch openssh for CVE-2026-73283, CVE-2026-73282, CVE-2026-73281 [MEDIUM]

Pull Request - State: closed - Opened by azurelinux-security 3 months ago - 4 comments
Labels: security, Packaging, 3.0-dev, AutoPR-Security, AI Backport, ready-for-stable-review

#18421 - [AutoPR- Security] Patch systemd-bootstrap for CVE-2026-15059 [MEDIUM]

Pull Request - State: closed - Opened by azurelinux-security 3 months ago - 3 comments
Labels: security, Packaging, 3.0-dev, AutoPR-Security, ready-for-stable-review

#18408 - [AutoPR- Security] Patch systemd for CVE-2026-16742, CVE-2026-15059 [MEDIUM]

Pull Request - State: closed - Opened by azurelinux-security 3 months ago - 11 comments
Labels: security, Packaging, 3.0-dev, AutoPR-Security, AI Backport, ready-for-stable-review

#18399 - [AutoPR- Security] Patch cpio for CVE-2026-66486, CVE-2026-66485, CVE-2026-66484 [MEDIUM]

Pull Request - State: closed - Opened by azurelinux-security 3 months ago - 3 comments
Labels: security, Packaging, 3.0-dev, AutoPR-Security, ready-for-stable-review

#18386 - ocaml-fmt: bound the styled_perf_bug benchmark loop

Pull Request - State: open - Opened by kgodara912 3 months ago
Labels: Packaging, 3.0-dev

#18385 - [Medium] Patch `erlang` for CVE-2026-53422, CVE-2026-54887, CVE-2026-55950, CVE-2026-59250

Pull Request - State: open - Opened by v-aaditya 3 months ago - 3 comments
Labels: security, Packaging, 3.0-dev

#18383 - libgit2: Correct the path for cmake file for ptest regression

Pull Request - State: open - Opened by kgodara912 3 months ago - 1 comment
Labels: Packaging, 3.0-dev

#18381 - poetry: pin packaging==26.2 to fix %check test failure

Pull Request - State: open - Opened by kgodara912 3 months ago - 1 comment
Labels: Packaging, ptest, 3.0-dev, ready-for-stable-review

#18377 - [AutoPR- Security] Patch perl for CVE-2026-15534 [MEDIUM]

Pull Request - State: closed - Opened by azurelinux-security 3 months ago - 1 comment
Labels: security, Packaging, 3.0-dev, AutoPR-Security, ready-for-stable-review

#18375 - [AUTOPATCHER-kernel] Kernel upgrade to version 6.18.43.1 - branch 3.0-dev

Pull Request - State: open - Opened by azurelinux-ci-jwt-app[bot] 3 months ago - 1 comment
Labels: Packaging, AutoUpgrade Kernel, 3.0-dev

#18369 - Upgrade `libkcapi` package to version 1.5.1 to fix CVE-2026-71225[Medium], CVE-2026-71226[High], CVE-2026-71227[Medium]

Pull Request - State: open - Opened by durgajagadeesh 3 months ago - 2 comments
Labels: security, Packaging, 3.0-dev, fasttrack/3.0, CVEFixReadyForMaintainerReview, CVE-fixed-by-upgrade

#18368 - [AutoPR- Security] Patch rpm for CVE-2026-44605 [MEDIUM]

Pull Request - State: closed - Opened by azurelinux-security 3 months ago - 1 comment
Labels: security, Packaging, 3.0-dev, AutoPR-Security, ready-for-stable-review

#18367 - [AutoPR- Security] Patch nodejs for CVE-2026-15157 [MEDIUM]

Pull Request - State: open - Opened by azurelinux-security 3 months ago - 1 comment
Labels: security, Packaging, 3.0-dev, AutoPR-Security, ready-for-stable-review

#18363 - [AutoPR- Security] Patch telegraf for CVE-2026-54332 [MEDIUM]

Pull Request - State: closed - Opened by azurelinux-security 3 months ago - 1 comment
Labels: security, Packaging, 3.0-dev, AutoPR-Security, ready-for-stable-review

#18362 - [AUTOPATCHER-kernel] Kernel upgrade to version 6.6.150.1 - branch 3.0-dev

Pull Request - State: closed - Opened by azurelinux-ci-jwt-app[bot] 3 months ago - 1 comment
Labels: Packaging, Tools, specs-extended, AutoUpgrade Kernel, 3.0-dev

#18351 - Resolved `ptest` failures in `meson` package

Pull Request - State: open - Opened by SumitJenaHCL 3 months ago - 1 comment
Labels: Packaging, ptest, 3.0-dev

#18347 - [AutoPR- Security] Patch telegraf for CVE-2026-54332 [MEDIUM]

Pull Request - State: closed - Opened by azurelinux-security 3 months ago - 2 comments
Labels: Packaging, 3.0-dev

#18346 - [AutoPR- Security] Patch apr-util for CVE-2026-32327, CVE-2026-34502, CVE-2026-34501, CVE-2025-49506 [HIGH]

Pull Request - State: open - Opened by azurelinux-security 3 months ago - 2 comments
Labels: security, Packaging, Tools, 3.0-dev, fasttrack/3.0, AutoPR-Security

#18344 - Add Kubevirt sidecar-shim sub-package and golden container image

Pull Request - State: open - Opened by woojoong88 3 months ago - 4 comments
Labels: Packaging, 3.0-dev

#18342 - Upgrade KubeVirt to 1.8.4, LibVirt to 11.9.0 and QEMU to 10.1.0

Pull Request - State: open - Opened by harshitgupta1337 3 months ago
Labels: Packaging, 3.0-dev

#18340 - [AUTOPATCHER-CORE] Upgrade `rubygem-msgpack` to 1.8.4 for CVE-2026-54522

Pull Request - State: closed - Opened by azurelinux-ci-jwt-app[bot] 3 months ago - 5 comments
Labels: security, Packaging, AutoUpgrade Core, 3.0-dev, ready-for-stable-review, CVE-fixed-by-upgrade

#18338 - e2fsprogs: backport fix for e2fsck skipping checks with orphan_file f…

Pull Request - State: open - Opened by Ankita13-code 3 months ago - 1 comment
Labels: Packaging, 3.0-dev

#18337 - [AutoPR- Security] Patch libarchive for CVE-2026-16517 [LOW]

Pull Request - State: open - Opened by azurelinux-security 3 months ago - 5 comments
Labels: security, Packaging, 3.0-dev, AutoPR-Security

#18325 - kernel-mshv: upgrade to 6.18

Pull Request - State: open - Opened by Redent0r 3 months ago
Labels: Packaging, 3.0-dev

#18309 - [AutoPR- Security] Patch kata-containers for CVE-2026-25800 [MEDIUM]

Pull Request - State: closed - Opened by azurelinux-security 3 months ago - 6 comments
Labels: Packaging, 3.0-dev

#18293 - [Medium] Patch python-virtualenv for CVE-2026-13346

Pull Request - State: open - Opened by Ratiranjan5 3 months ago - 4 comments
Labels: security, Packaging, 3.0-dev, ready-for-stable-review

#18290 - [AutoPR- Security] Patch python-pip for CVE-2026-13346 [MEDIUM]

Pull Request - State: open - Opened by azurelinux-security 3 months ago - 6 comments
Labels: security, Packaging, 3.0-dev, AutoPR-Security, AI Backport, ready-for-stable-review

#18278 - [AutoPR- Security] Patch gdb for CVE-2026-15003 [MEDIUM]

Pull Request - State: open - Opened by azurelinux-security 3 months ago - 3 comments
Labels: security, Packaging, 3.0-dev, AutoPR-Security, AI Backport, ready-for-stable-review

#18276 - [AutoPR- Security] Patch rabbitmq-server for CVE-2026-65624, CVE-2026-59248, CVE-2026-43971 [MEDIUM]

Pull Request - State: closed - Opened by azurelinux-security 3 months ago - 9 comments
Labels: security, Packaging, 3.0-dev, AutoPR-Security, AI Backport, ready-for-stable-review

#18275 - [AutoPR- Security] Patch qemu for CVE-2025-63913 [MEDIUM]

Pull Request - State: open - Opened by azurelinux-security 3 months ago - 2 comments
Labels: security, Packaging, 3.0-dev, AutoPR-Security, ready-for-stable-review

#18262 - Add new functionality for omuxsock in rsyslog

Pull Request - State: open - Opened by BinduSri-6522866 3 months ago - 7 comments
Labels: Packaging, Tools, 3.0-dev, fasttrack/3.0

#18260 - [AutoPR- Security] Patch bison for CVE-2026-56390, CVE-2026-56389 [MEDIUM]

Pull Request - State: open - Opened by azurelinux-security 3 months ago - 5 comments
Labels: security, Packaging, 3.0-dev, AutoPR-Security, AI Backport, ready-for-stable-review

#18250 - tracelogging: migrate test suite to Catch2 v3 API

Pull Request - State: closed - Opened by kgodara912 3 months ago - 3 comments
Labels: Packaging, ptest, 3.0-dev, ready-for-stable-review

#18249 - atftp: fix and enable the %check test suite

Pull Request - State: closed - Opened by kgodara912 3 months ago - 1 comment
Labels: Packaging, ptest, 3.0-dev, ready-for-stable-review

#18182 - Include test-only spec patches in SRPMs for python-filelock and libstoragemgmt

Pull Request - State: closed - Opened by Copilot 3 months ago - 9 comments
Labels: security, Packaging, ptest, 3.0-dev, ready-for-stable-review