azure linux security

Microsoft’s security guidance for CVE-2026-32288 identifies an April 2026 Go archive/tar flaw in which tar.Reader can consume unbounded memory while parsing malicious archives that abuse the old GNU sparse map format. The bug is not a Windows desktop catastrophe, but it is exactly the sort of...

Microsoft’s brief advisory that “Azure Linux includes this open‑source library and is therefore potentially affected” is accurate — but it is a product‑scoped inventory statement, not a technical guarantee that no other Microsoft product can contain the same vulnerable code. In short: Azure...

The recently disclosed vulnerability CVE-2024-28834—a Minerva-style side‑channel weakness in the GnuTLS library—is a sharp reminder that cryptographic determinism and convenience features can become catastrophic when combined with observable execution differences, and Microsoft’s public...