Microsoft’s short MSRC advisory that “Azure Linux includes this open‑source library and is therefore potentially affected” is accurate — but it is a product‑scoped inventory attestation, not proof that no other Microsoft product can or does include the same vulnerable code.
Background / Overview...