ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. Kernel: netfilter: race condition between ipset_cmd_add and ipset_cmd_swap Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  2. Glibc: potential use-after-free in gaih_inet() Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  3. Goose: goose: shell history and environment leak via terminal integration Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  4. Multiple Vulnerabilities in IBM API Connect Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  5. Forge: Denial of service in TLS record processing via call stack exhaustion Advisory content revised: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used forge.tls.createConnection(), TLS record processing, process() to process the relevant inp…6 linked entries across history · in Security Follow evidence and connection reasons
  6. Forge: ASN.1 OID first arc truncation in asn1.oidToDer Advisory content revised: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, asn1.oidToDer() in lib/asn1.js did not range-check the first two arcs of an OID. An application that accepted an untrusted …5 linked entries across history · in Security Follow evidence and connection reasons
  7. Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie Advisory content revised: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the forge.http client stored cookie names and paths from Set-Cookie response headers in ordinary JavaScript objects. A mali…5 linked entries across history · in Security Follow evidence and connection reasons
  8. russh's SSH agent server is susceptible to unbound allocations via repeated SSH_AGENT_CONSTRAIN_CONFIRM messages Advisory content revised: russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.65.0, russh::keys::agent::server::serve in russh/src/keys/agent/server.rs accepts repeated SSH_AGENT_CONSTRAIN_CONFIRM records whil…4 linked entries across history · in Security Follow evidence and connection reasons
  9. russh's SSH client is susceptible to unbounded allocations via EXT_INFO packets Advisory content revised: russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.65.0, the client Session::process_packet path in russh/src/client/encrypted.rs accepts repeated packets encoded with russh's privat…4 linked entries across history · in Security Follow evidence and connection reasons
  10. russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang) Advisory content revised: russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. From 0.60.0 until 0.65.0, channel-open parsing accepts a peer-declared maximum_packet_size of zero and passes it into ChannelTx::poll_writable…4 linked entries across history · in Security Follow evidence and connection reasons
  11. SharePoint: Admin Center - Data Access Governance - Permission report for a given group Date moved later4 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  12. Sssd: sssd: information disclosure via odata injection in entra id lookups Source marks advisory rejected: Red Hat Product Security has been notified that this CVE is a duplicated of CVE-2026-1040473 linked entries across history · in Security Follow evidence and connection reasons
  13. decode-uri-component: Denial of service via quadratic replacement of percent-encoded runs Advisory content revised: decode-uri-component provides a more robust alternative to decodeURIComponent. Prior to 0.5.1, decodeUriComponent in index.js falls back to customDecodeURIComponent after native decoding throws, and the fallback collects every distinct perc…3 linked entries across history · in Security Follow evidence and connection reasons
  14. Microsoft Purview: Data Lifecycle Management - Graph API Support for Archive Mailboxes Now rolling out3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  15. Postgresql: extension script @substitutions@ within quoting allow sql injection Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  16. Kernel: information disclosure in vhost/vhost.c:vhost_new_msg() Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  17. Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  18. Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  19. Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  20. Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  21. Keycloak-services: keycloak-services: path traversal in x.509 crl distribution point allows arbitrary local file read Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  22. Sssd: sssd: denial of service via out-of-bounds read in autofs responder Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  23. Keycloak-services: keycloak-services: device authorization grant bypasses per-client minimum.acr.value enforcement Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  24. Keycloak-services: keycloak-services: smtp starttls plaintext credential and message downgrade Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  25. Keycloak-services: keycloak-services: oidc dcr read-modify-write silently disables offline token revocation Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  26. Keycloak-services: keycloak-services: stored xss on login page via kcsanitize bypass Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  27. Clevis: clevis: integer underflow in pkcs#11 data socket handler crashes daemon on unbound client connection Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  28. Ghostscript: out-of-bounds read in ghostscript shade_next_color via integer overflow of indexed color index in mesh shading Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  29. Wildfly: wildfly-iiop: wildfly-ejb3: wildfly: authentication bypass on iiop ejb invocations as csiv2 ittprincipalname accepted without transport binding Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  30. Apache ZooKeeper: Unbounded recursion in snapshot serialization allows a client to render the server unrecoverable Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 07:12 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.