Here are a few links that as of writing of this blog are considered reliable, and I write them here so that I can use this blog as a resource when I talk to people.  Reliability is NOT guaranteed, links may change over time and apparently could be exploited.  This really is a public document for my own use.

A terse governmental documentation:

Easier to read, but very scary:

Another one for Linux users:

An author offers suggestions for a fix:

As to any official Microsoft answers, statements, etc. then you will need to find another blog.  The ones I checked pretty much said that Microsoft didn’t use OpenSSL on Azure, but I am not making that statement officially, this is just research that I am doing for questions that students have asked me.