ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. Eog: eye of gnome: buffer overrun when parsing malicious png files with non-standard iccp chunk Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  2. Babelfish for PostgreSQL Privilege Escalation Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  3. Hivex: hivex: denial of service via out-of-bounds read in big-data block processing Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  4. SurrealDB before 3.3.0 Use-After-Free via affinitypool spawn_local in KV Backends Newly collected advisory: Use-after-free in KV backends via leaked `affinitypool::spawn_local` future2 linked entries across history · in Security Follow evidence and connection reasons
  5. Github.com/argoproj-labs/argocd-image-updater: argocd-image-updater: arbitrary command execution via crafted ssh repository proxy configuration Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  6. Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902) Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  7. Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncation Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  8. Keycloak-broker: keycloak: privilege escalation to realm administrator via improper authorization in identity provider mapper Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  9. P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  10. Glib: integer overflow leading to buffer underflow and out-of-bounds write in glib g_base64_encode() Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  11. Glib: glib: memory corruption via integer overflow in unicode case conversion Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  12. Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  13. Openjdk-orb: unauthed class loading via iiop in eap Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  14. Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  15. Wildfly-ejb: wildfly-iiop-openjdk: eap iiop listeners may permit unauthed deserialization Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  16. Keycloak-services: keycloak-services: oidc idp update reuses masked client secret after token url change Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  17. Keycloak-services: keycloak-services: incomplete fix for ciba brute-force lockout bypass at token redemption Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  18. Libarchive: libarchive: signed integer overflow in archive_write_zip_header Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  19. Libxml2: memory leak leading to local denial of service in xmllint interactive shell Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  20. Keycloak-services: keycloak-services: group policy extendchildren matches sibling group path prefixes Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  21. Keycloak-services: keycloak-services: client policy source-group condition bypass via duplicate group name matching Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  22. Keycloak-services: keycloak-services: inactive out-of-audience token introspection leaks signed jwt claim Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  23. Keycloak-services: keycloak-services: saml http-redirect binding response preserves query string leading to parameter pollution Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  24. Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  25. Keycloak-services: keycloak-services: name-only group claims let same-name groups satisfy path-specific group policies Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  26. Wildfly-platform-mbean: wildfly-platform-mbean: rbac sensitive attribute read bypass for platform runtimemxbean Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  27. Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  28. WAF - WAF Release - 2026-07-01 Affected-version evidence changed: A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attacker to escalation of privilege via specially crafted HTTP requests.2 linked entries across history · in Security Follow evidence and connection reasons
  29. Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  30. Libarchive: libarchive: denial of service via malformed iso file processing Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 07:12 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.