Microsoft today released Azure Linux 3.0.20251021 as the latest update to their in-house Linux distribution.
Azure Linux 3.0.20251021 pulls in AppArmor for additional security protections, now produces Azure Marketplace images with the Linux 6.12 LTS kernel, enables various additional kernel modules/features, enables DMA Peer-To-Peer (P2P) support, and patches numerous packages for new security fixes.
“Add apparmor into Azure Linux 3.0
Add libimobiledevice-glue to SPECS-EXTENDED
Add marketplace images for 6.12 kernels
Add python-spnego to SPECS-EXTENDED
Enable ARM64 build for ibarr/ibsim/mlnx-ethtool/multiperf
Enable Aquantia AQtion ethernet driver kernel configs
Enable DMA P2P
Enable arm64 build for OFED stack kernel modules
Enable ipmi panic string for kernel-64k, kernel-hwe
Fix apache-commons-pool2 build error
Fix cglib License Check build error
Fix coredns random rebuilds bug
Fix gl-manpages build error
Fix nginx stream ssl preread
Fix perl-Locale-Msgfmt build
Generic Kernel version-release: kernel-6.6.104.2-4
Patch binutils for CVE-2025-11083, CVE-2025-11082, CVE-2025-8225, CVE-2025-0840, CVE-2025-1176, CVE-2025-1178, CVE-2025-1181, CVE-2025-1182
Patch cmake for CVE-2025-10148
Patch containerized-data-importer for CVE-2025-58058
Patch coredns for CVE-2025-58063
Patch curl for CVE-2025-10148
Patch erlang for CVE-2025-48038, CVE-2025-48039, CVE-2025-48040, CVE-2025-48041
Patch expat for CVE-2025-59375
Patch fio for CVE-2025-10823
Patch glib for CVE-2025-7039
Patch glibc for CVE-2025-4802
Patch glibc for upstream patch bug #25847
Patch gdb for CVE-2025-11082
Patch jx for CVE-2025-58058
Patch keras for CVE-2025-9905, CVE-2025-9906
Patch libtiff for CVE-2024-13978
Patch openssl for CVEs
Patch packer for CVE-2025-58058
Patch perl-JSON-XS for CVE-2025-40928
Patch python-pip for CVE-2025-8869
Patch python3 for CVE-2025-8291
Patch skopeo for CVE-2025-58058
Patch systemd for CVE-2025-4598
Patch x/crypto and x/net for CVEs
Remove libyami-1.3.2 from SPECS_EXTENDED
Remove python-unittest2 from SPECS_EXTENDED
Switch to bootstrap toolchain from 3.0 container
Upgrade buildah to 1.41.4
Upgrade ca-certificates
Upgrade cppcheck to 2.18.3
Upgrade hwe OOT specs to match kernel-hwe
Upgrade ImageCustomizer to 1.0.0 and add semantic version and latest tag support for imagecustomizer golden container
Upgrade kernels to 6.6.104.2
Upgrade kronosnet to 1.29
Upgrade libpeas to 1.36.0
Upgrade mod_md to 2.4.26
Upgrade mod_security to 2.9.7
Upgrade mythes to 1.2.5
Upgrade mythes-ca to 2.3.1
Upgrade netsniff-ng to 0.6.9
Upgrade perl-File-Find-Object to 0.3.8
Upgrade perl-File-MimeInfo to 0.35
Upgrade perl-Test-Script to 1.29
Upgrade podman to 5.6.1
Upgrade python-aiodns to 3.2.0
Upgrade python-mutagen to 1.47.0
Upgrade python-pyperclip to 1.8.2
Upgrade python-testtools and python-fixtures
Upgrade rubygem-rouge to 4.4.0
Upgrade SymCrypt-OpenSSL to 1.9.2
Upgrade SymCrypt-OpenSSL to 1.9.3
Upgrade virt-top to 1.1.1″
Downloads and more details on the Azure Linux 3.0 update for October 2025 via GitHub.
