Microsoft’s phrasing that “Azure Linux includes this open‑source library and is therefore potentially affected” is a product‑scoped inventory attestation — not a blanket statement that no other Microsoft product can or does include the same vulnerable code. Background / Overview
CVE‑2025‑22109...
