cve 2025 38399

Microsoft’s security note that “Azure Linux includes this open‑source library and is therefore potentially affected” is accurate — but it is a product‑level attestation, not proof that no other Microsoft product can include the vulnerable code; Azure Linux is simply the only Microsoft product...