Microsoft’s short public attestation — that “Azure Linux includes this open‑source library and is therefore potentially affected” — is accurate for the product it names, but it is a scoped inventory statement, not proof that no other Microsoft product could include the same vulnerable...