Microsoft’s short advisory that “Azure Linux includes this open‑source library and is therefore potentially affected” is accurate — but it is a scoped inventory attestation, not a technical guarantee that no other Microsoft product can contain the same vulnerable component.
Background / Overview...