ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. Keycloak-services: keycloak-services: unauthenticated jvm termination via saml 1.1 authoritybinding parsing loop Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  2. Keycloak-services: keycloak-services: unauthenticated persistent disk exhaustion via theme gzip cache Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  3. Keycloak-services: keycloak-services: account takeover via stale sso_auth note in organization identity-first login Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  4. Keycloak-services: keycloak-services: uma protection api resourcetype field not validated — cross-owner resource access Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  5. Krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  6. Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack() Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  7. Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  8. Keycloak-services: keycloak-services: admin api missing audience check Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  9. Keycloak-services: keycloak-services: unauthenticated denial of service via saml soap endpoint unbounded xml parsing Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  10. Libtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decoding Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  11. Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  12. Glib2: toctou symlink race in `g_file_create_replace_destination` fallback path Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  13. Out-of-bounds Write in Wi-Fi NPU Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  14. Undertow: undertow: chunkreader message length permits chunk-size overflow Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  15. Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  16. Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  17. Keycloak-services: keycloak-services: saml broker accepts holder-of-key assertions without proof of key possession Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  18. Keycloak-services: keycloak-services: saml broker ignores proxyrestriction delegation constraints Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  19. Keycloak-services: keycloak-services: dcr protocol mapper config not validated, allowing iat holders to forge sub and aud claims in signed tokens Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  20. Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  21. Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  22. Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  23. Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  24. Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  25. Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table size Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  26. Io.netty/netty-codec-http: netty rtspdecoder method-token smuggling via trailing control byte Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  27. Io.netty/netty-codec-http2: http/1 authority-form connect is translated to malformed http/2 connect with host-controlled :authority Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  28. Io.netty/netty-codec-http2: io.netty/netty-codec-http3: netty: http/2 and http/3 extended connect requests are downgraded as regular connect requests Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  29. Io.netty/netty-codec-http2: http/1 absolute-form host mismatch is translated to http/2 :authority, overriding the request-target authority Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  30. Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough) Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 22:49 UTC · 273 of 275 readable · 271 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.