Microsoft’s public advisory naming Azure Linux as including the Undici library for CVE-2024-30260 is accurate — but it is a product-scoped attestation, not proof that Azure Linux is the sole Microsoft product that could possibly contain or be affected by the vulnerable code.
Background /...