ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. Identity and access (beta): 5 API change passages Graph announcement revised · 5 passages2 linked entries across history · in Identity & APIs Follow evidence and connection reasons
  2. Device and app management (beta): 8 API change passages Graph announcement revised · 8 passages2 linked entries across history · in Identity & APIs Follow evidence and connection reasons
  3. Groups (beta): 2 API change passages Graph announcement revised · 2 passages2 linked entries across history · in Identity & APIs Follow evidence and connection reasons
  4. Device and app management (beta): 7 API change passages Graph announcement revised · 7 passages2 linked entries across history · in Identity & APIs Follow evidence and connection reasons
  5. Identity and access (beta): 5 API change passages Graph announcement revised · 5 passages2 linked entries across history · in Identity & APIs Follow evidence and connection reasons
  6. Device and app management (beta): 4 API change passages Graph announcement revised · 4 passages2 linked entries across history · in Identity & APIs Follow evidence and connection reasons
  7. Identity and access (beta): 4 API change passages Graph announcement revised · 4 passages2 linked entries across history · in Identity & APIs Follow evidence and connection reasons
  8. Device and app management (beta): 17 API change passages Graph announcement revised · 17 passages2 linked entries across history · in Identity & APIs Follow evidence and connection reasons
  9. Teamwork and communications (beta): 3 API change passages Graph announcement revised · 3 passages2 linked entries across history · in Identity & APIs Follow evidence and connection reasons
  10. Device and app management (beta): 18 API change passages Graph announcement revised · 18 passages2 linked entries across history · in Identity & APIs Follow evidence and connection reasons
  11. Teamwork and communications (v1.0): 5 API change passages Graph announcement revised · 5 passages2 linked entries across history · in Identity & APIs Follow evidence and connection reasons
  12. Google · Google services (not Google Cloud) Changed list17 linked entries across history · in Other vendors Follow evidence and connection reasons
  13. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. Advisory content revised4 linked entries across history · in Security Follow evidence and connection reasons
  14. SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process. Advisory content revised3 linked entries across history · in Security Follow evidence and connection reasons
  15. SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read. Advisory content revised3 linked entries across history · in Security Follow evidence and connection reasons
  16. undici is an HTTP client library for Node.js. In versions 5.15.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its WebSocket client, including the bundled WebSocket exposed by Node.js, can be driven to exhaust process memo… Advisory content revised3 linked entries across history · in Security Follow evidence and connection reasons
  17. uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside the scripts directory via crafted console_scripts or gui_scripts entry point names. Attackers who induce users to install a malici… Advisory content revised3 linked entries across history · in Security Follow evidence and connection reasons
  18. ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query p… Advisory content revised3 linked entries across history · in Security Follow evidence and connection reasons
  19. OpenTelemetry-Go is the Go implementation of OpenTelemetry. Versions 1.41.0 and 1.43.0 removed raw-length rejection and it causes `Parse` to process arbitrarily large/invalid baggage headers and log errors, enabling DoS via oversized inputs… Advisory content revised3 linked entries across history · in Security Follow evidence and connection reasons
  20. rustls-webpki through 0.103.12 (and 0.104.0-alpha releases before 0.104.0-alpha.7) contains a reachable panic in bit_string_flags() in src/der.rs. The input guard fails to reject a named-bit BIT STRING whose content is exactly [0x00] (zero … Advisory content revised3 linked entries across history · in Security Follow evidence and connection reasons
  21. Amazon Web Services · AMAZON · sa-east-1 Changed list3 linked entries across history · in Other vendors Follow evidence and connection reasons
  22. Microsoft Viva: Engage Event Broadcast, Meetings and custom events with moderated feed, annoynmous posting on web & mobile Notice updated: MC1480869: (Updated) Microsoft 365 settings enabled by default for newly created Engage communities3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  23. Planner: Planner Agent chat in Basic Plans Launched3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  24. Dynamics 365 Contact Center: Unified routing - Orchestrate conversation distribution with natural language playbooks Launched3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  25. Identity and access | Directory management (beta): 2 API change passages Graph announcement revised · 2 passages3 linked entries across history · in Identity & APIs Follow evidence and connection reasons
  26. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  27. undici is an HTTP client library for Node.js. In versions 6.5.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its EventSource client can be driven to exhaust process memory by a malicious or compromised Server-Sent Events … Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  28. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the … Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  29. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all … Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  30. gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, the xDS RBAC HTTP filter in internal/xds/httpfilter/rbac/rbac.go does not lowercase header matcher names in normalizeHeaderMatcher even though incoming metadata keys are lo… Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 20:36 UTC · 274 of 275 readable · 270 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.