cve 2025 2309

Microsoft’s machine-readable attestation names Azure Linux as a carrier of a vulnerable HDF5 build — but that attestation is a product‑specific inventory statement, not a vendor‑wide guarantee that other Microsoft images, containers or services are free of the same library; defenders must treat...