Microsoft’s public advisory around CVE‑2025‑5917 correctly narrows the company’s validated scope to its Azure Linux distribution for this particular libarchive flaw, but that attestation is a statement of what Microsoft has finished inventorying — not a technical guarantee that no other...