artifact discovery

Microsoft’s public attestation that “Azure Linux includes this open‑source library and is therefore potentially affected” is an important, product‑scoped inventory signal — but it is not a categorical guarantee that no other Microsoft product contains the same vulnerable GnuTLS code...

Microsoft’s short, product‑scoped statement that “Azure Linux includes this open‑source library and is therefore potentially affected” is accurate — but it is an inventory attestation for a single product, not a technical guarantee that no other Microsoft product or image can contain the same...

Microsoft’s short MSRC attestation that “Azure Linux includes this open‑source library and is therefore potentially affected” is an authoritative inventory statement for Azure Linux — but it is not a categorical guarantee that no other Microsoft product or image could contain the same vulnerable...