Microsoft’s short, pointed wording on CVE-2025-37807 — “Azure Linux includes this open‑source library and is therefore potentially affected” — is accurate for the product Microsoft has inspected and is useful for customers running those images, but it should not be read as a blanket guarantee...