The short, practical answer is: Microsoft’s public advisory names Azure Linux as the product it has inspected and confirmed contains the vulnerable Go component, but that statement is a scoped inventory attestation — it does not prove Azure Linux is the only Microsoft product that could include...
A newly published vulnerability in the Go standard library — tracked as CVE-2025-61724 — exposes a classic performance pitfall: the Reader.ReadResponse function in net/textproto could be coaxed into excessive CPU consumption when it constructs response messages composed of a large number of...