Microsoft’s public attestation that Azure Linux includes the REXML library is accurate and authoritative for that product, but it is not proof that no other Microsoft product contains the vulnerable open‑source component; absence of attestations is not proof of absence. Treat the Azure Linux...