Microsoft’s one-line MSRC attestation that “Azure Linux includes this open‑source library and is therefore potentially affected” is accurate as far as it goes — but it is a product‑scoped inventory statement, not a technical guarantee that no other Microsoft product or internal image can contain...