ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. Apache Airflow: Secrets masker: camelCase key names (privateKey, connectionString, webhookUrl) not matched against the sensitive-field list Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  2. Apache Airflow: API: asset endpoints return scheduled/producing/consuming Dag IDs the caller cannot read Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  3. Unbounded decoded HTTP/2 header-list size in cowlib cow_http2_machine enables HPACK amplification memory exhaustion Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  4. Apache Airflow: Secrets masker: pattern-based masking bounded at depth 5 returns deeply-nested registered secrets in cleartext Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  5. Cowboy HTTP/1.1 Unbounded Buffering of Pipelined Data During Request Handling Enables Memory Exhaustion Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  6. tcpflow through 1.6.1 Out-of-Bounds Read via TCP Demultiplexer Payload Length Affected-version evidence changed: tcpflow < 1.7.0 Out-of-Bounds Read via TCP Demultiplexer Payload Length2 linked entries across history · in Security Follow evidence and connection reasons
  7. Vulnerabilities in spring-context, logback-core and Another JSON Schema Validator might affect IBM Storage Defender Copy Data Management Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  8. Apache Airflow: Audit-log secrets masker redacts by key name only, persisting connection and Variable secrets in cleartext Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  9. TinyUSB < 0.20.1 Integer Underflow via HID Report Descriptor Parser Affected-version evidence changed: TinyUSB < 0.21.0 Integer Underflow via HID Report Descriptor Parser2 linked entries across history · in Security Follow evidence and connection reasons
  10. Apache Airflow: CeleryExecutor: forged callback workloads run on Celery workers without workload-token validation Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  11. Apache Airflow Task SDK: Task SDK SecretCache: non-injective team cache key enables cross-team secret disclosure in multi-team mode Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  12. Apache Airflow: CLI argv masking misses Variable values and --conn-extra, persisting secrets in audit logs Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  13. Authentication Bypass with X-Agentic-Ally-Token in Keepnet Labs Agentic AI / Agentic Ally Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  14. Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile Advisory content revised: A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it sti…5 linked entries across history · in Security Follow evidence and connection reasons
  15. follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects Advisory content revised: follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 until 1.16.2, the documented sensitiveHeaders option is checked with value instanceof Array, so an array created in another JavaSc…5 linked entries across history · in Security Follow evidence and connection reasons
  16. OSAC operator: Kubeconfig credential-plugin execution and SSRF in console proxy Advisory content revised: OSAC operator is a Kubernetes operator. In the affected revision identified as 8220502, the `console-proxy` `RemoteConfigResolver` parses Kubernetes Secret kubeconfig data with `clientcmd.RESTConfigFromKubeConfig` without sanitizing the res…3 linked entries across history · in Security Follow evidence and connection reasons
  17. Windows Paint Remote Code Execution Vulnerability Advisory content revised3 linked entries across history · in Security Follow evidence and connection reasons
  18. ChatCLI before v1.215.2 Origin Validation Error via Unvalidated MCP OAuth Resource Indicator Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  19. mcp-go before v1.2.1 Origin Validation Error via Unvalidated Well-Known Protected Resource Metadata Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  20. ASP.NET Core Remote Code Execution Vulnerability Advisory content revised: Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.4 linked entries across history · in Security Follow evidence and connection reasons
  21. OneNote: Summary and Q&A in OneNote Mobile with Copilot (Android) Date moved later4 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  22. OneNote: Summary and Q&A in OneNote Mobile with Copilot (Iphone) Date moved later4 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  23. Outlook: Enriching profile cards with custom, organization-specific properties Date moved later4 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  24. Planner: AI-generated Status Reports in Planner Agent Now rolling out4 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  25. Filecoin Pin: Unbounded DAG pinning can exhaust filecoin-pin server resources Advisory content revised: Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service. In daemon deployments up to and including version 1.1.0, `POST /pins` in `src/filecoin-pinning-server.ts` checks a caller-supplied CID with `CID…3 linked entries across history · in Security Follow evidence and connection reasons
  26. Microsoft Viva: Import HRIS data in Viva Glint from Microsoft Admin Center Now rolling out3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  27. OneNote: Multimodal capture in Copilot Notebooks (Windows) Date moved later3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  28. Microsoft Purview: Data Loss Prevention-Expanded inline protection for unmanaged apps in Edge for Business Date moved later3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  29. Microsoft Copilot (Microsoft 365): App Blocks Date moved later3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  30. Kernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuid Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 07:12 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.