Microsoft’s short public mapping that “Azure Linux includes this open‑source library and is therefore potentially affected” is accurate for the product Microsoft checked — but it is not a categorical statement that no other Microsoft product can contain the same vulnerable MiniZip code...
