ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. Cockpit-machines: cockpit-machines: sensitive data exposure of guest credentials via json argument in process list Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  2. Cockpit-machines: cockpit-machines: sensitive data exposure via command-line arguments Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  3. Fetchmail: fetchmail: stack-based buffer overflow in ntlm authentication (fetchmail-sa-2026-01) Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  4. Unexpected code execution via --sysroot, -target, -isysroot, -Wl,-syslibroot, and -x cgo flags in cmd/go Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  5. Arbitrary command execution via GCC spec files in cgo linker search directories in cmd/go Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  6. Unexpected code execution and arbitrary file write via Clang -gen-* and GCC -gnat* flags in cgo in cmd/go Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  7. Arbitrary code execution during build on darwin via "-l to_library" in cgo in cmd/go Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  8. Linker script injection via split -Wl, flags and Darwin or symbol linker flags in cgo in cmd/go Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  9. Arbitrary code execution via crafted .syso files and cgo linker input files in cmd/go Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  10. Flag sanitization bypass via "#cgo pkg-config:" directives in cmd/go Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  11. Cgo directive injection via .syso files disguised as Go object files in cmd/go and cmd/link Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  12. Host linker flag injection via //go:cgo_* directives in cmd/compile and cmd/link Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  13. Linker flag injection via cgo_import_dynamic and PE DLL names in cmd/cgo, cmd/compile, and cmd/link Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  14. Unexpected code execution via escaped quotes in //go:cgo_ldflag in cmd/go and cmd/compile Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  15. HTTP/1 server crash due to MaxBytesReader header race in net/http Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  16. Microsoft Edge policies · 155.0.4283.62 to 156.0.4314.42 Policy templates changed: Microsoft Edge policies · 157.0.4341.42 to 157.0.4341.467 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  17. Go JOSE: Panic during CBC-HMAC processing Advisory content revised: Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.5, decryp…7 linked entries across history · in Security Follow evidence and connection reasons
  18. Go JOSE: Panics in JSON parsing Advisory content revised: Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.5, parsin…5 linked entries across history · in Security Follow evidence and connection reasons
  19. Unbounded <col max> lacks MaxColumns check in flatCols(), causing column mutators to hang or OOM in github.com/xuri/excelize Source adds a fixed version: Excelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator hangs or OOMs the process3 linked entries across history · in Security Follow evidence and connection reasons
  20. vsock/vmci: validate packet source for connected sockets Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  21. tun: Require CAP_NET_ADMIN to attach to an ownerless device Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  22. KB5129237 · Windows Server 2022 Known issue resolved: USB audio devices might fail to start or produce no sound3 linked entries across history · in Windows Follow evidence and connection reasons
  23. Glib: glib: buffer underflow in gvariant parser leads to heap corruption Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  24. HEIF Image Extensions Remote Code Execution Vulnerability Published vulnerability2 linked entries across history · in Security Follow evidence and connection reasons
  25. Windows NTFS Elevation of Privilege Vulnerability Published vulnerability2 linked entries across history · in Security Follow evidence and connection reasons
  26. Windows NTFS Tampering Vulnerability Published vulnerability2 linked entries across history · in Security Follow evidence and connection reasons
  27. Windows Modern Device Management (MDM) Remote Code Execution Vulnerability Published vulnerability2 linked entries across history · in Security Follow evidence and connection reasons
  28. Azure CycleCloud Elevation of Privilege Vulnerability Published vulnerability2 linked entries across history · in Security Follow evidence and connection reasons
  29. Visual Studio Code Information Disclosure Vulnerability Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  30. Visual Studio Code Information Disclosure Vulnerability Published vulnerability2 linked entries across history · in Security Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 00:55 UTC · 273 of 275 readable · 271 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.