microsoft/azurelinux 1.0.20221007-1.0

1.0.20221007

on GitHub

Add runtime requirement on iana-etc to fping
Patch gnutls to fix CVE-2021-4209
Patch libvirt to fix CVE-2021-3975
Patch libtiff to fix CVE 2022 2953
Patch mlocate test to adjust deep heirarchy ptest for Mariner
Patch python2 and python3 to fix CVE-2015-20107 (this removes mailcap functionality)
Patch python-mako to fix CVE-2022-40023.
Upgrade cryptsetup to version 2.3.7 to fix CVE-2021-4122
Upgrade Kernel to 5.10.145.1 to fix CVE-2022-1204, CVE-2022-1882, CVE-2022-1973, CVE-2022-2503, CVE-2022-2785, CVE-2022-2873, CVE-2022-2991, CVE-2022-33743, CVE-2022-33744, CVE-2022-36946 CVE-2022-39842
Upgrade mariadb to version 10.3.36 to fix CVE-2022-32091, CVE-2022-38791, CVE-2018-25032 -
Upgrade nghttp2 to version 1.50.0
Upgrade nodejs to version 14.20.1 to fix CVE-2022-32213, CVE-2022-32214, CVE-2022-32215
Upgrade postgresql to version 12.12 to fix CVE-2022-1552
Upgrade vim to version 9.0.0614 to fix multiple CVE's
Update ca-certificates to September 2022 (2022-10-05) release of Microsoft trusted root CAs