The Lynx WWW client vulnerability identified as CVE‑1999‑0817 is real and ancient, but it has resurfaced in conversations because Microsoft’s Security Response Center (MSRC) published a product‑scoped attestation saying Azure Linux (the Azure Linux distribution, formerly CBL‑Mariner) includes...
Microsoft’s short statement — that “Azure Linux includes this open‑source library and is therefore potentially affected” — is accurate for the product it names, but it is not a categorical guarantee that no other Microsoft product carries the same vulnerable Lynx code; absence of additional...