Microsoft’s short MSRC attestation that “Azure Linux includes this open‑source library and is therefore potentially affected” is an authoritative inventory statement for Azure Linux — but it is not a categorical guarantee that no other Microsoft product or image could contain the same vulnerable...
