Microsoft’s brief advisory — that “Azure Linux includes this open‑source library and is therefore potentially affected” — is accurate as a product‑level attestation, but it is not a technical guarantee that no other Microsoft product can include the same vulnerable upstream component.
Background...