cve 2025 2309

  1. Azure Linux Attestation and HDF5 CVE-2025-2309: What It Means for Microsoft Artifacts

    Microsoft’s machine-readable attestation names Azure Linux as a carrier of a vulnerable HDF5 build — but that attestation is a product‑specific inventory statement, not a vendor‑wide guarantee that other Microsoft images, containers or services are free of the same library; defenders must treat...