A curious Microsoft employee has saved the world from a potential global meltdown as several Linux distros were found vulnerable to an XZ backdoor tracked under CVE-2024-3094 (CVSS score of 10.0).
Microsoft's in-house CBL-Mariner Linux distribution has routinely seen weekly-ish updates to this open-source code used within Azure, WSL, and other areas of the Redmond company
While years ago it was hard envisioning Microsoft contributing significantly to the Linux kernel or Mesa 3D graphics driver stack, maintaining its own in-house Linux distribution, or publishing so much open-source software, these days it's par for the course thanks to Windows Subsystem for Linux (WSL), Linux dominating Azure instances, etc
Microsoft has released an updated version of its CBL-Mariner 2.0 in-house Linux distribution that includes various security patches, new packages being added to the OS, and a variety of other updates.