ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. Spacewalk-java: spacewalk: red hat network satellite: spacewalk java: privilege escalation via cross-site request forgery Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  2. Spacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameter Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  3. Spacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution. Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  4. Spacewalk: spacewalk and red hat network satellite: cross-site scripting vulnerability via search forms Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  5. Spacewalk: spacewalk: cross-site scripting via uri in lookup login/password form Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  6. Spacewalk-backend: spacewalk-backend: information disclosure via cleartext passwords in error messages Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  7. Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  8. Io.quarkus.http/quarkus-http-core: quarkus http cookie smuggling Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  9. Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  10. Avahi: avahi wide-area dns uses constant source port Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  11. Avahi: avahi wide-area dns predictable transaction ids Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  12. Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos) Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  13. Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  14. Libsoup: denial of service attack to websocket server Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  15. Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  16. UniPAY Payment Gateway For WooCommerce <= 2.3 - Unauthenticated Order Payment Forgery via Empty IPN Secret Affected-version evidence changed: UniPAY Payment Gateway For WooCommerce < 2.4 - Unauthenticated Order Payment Forgery via Empty IPN Secret2 linked entries across history · in Security Follow evidence and connection reasons
  17. Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  18. Sssd: sssd: denial of service via unbounded negative cache growth Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  19. Sssd: sssd: information disclosure via query injection in entra id lookups Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  20. Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  21. Clevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable file Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  22. Clevis: clevis: no authentication on pkcs#11 af_unix sockets allows key injection under permissive umask Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  23. Clevis: clevis: pkcs#11 token pin written to world-readable file Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  24. Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-tool Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  25. Ghostscript: heap buffer overflow in ghostscript truetype outliner due to npointstotal integer underflow during retry rollback Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  26. Luksmeta: missing slot-range validation permits out-of-gap device i/o Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  27. Cockpit-machines: cockpit-appstream: rhsm access-token disclosure through image helper command-line arguments Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  28. Cockpit-machines: cockpit-appstream: vnc console password disclosure through virt-xml command-line arguments Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  29. Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  30. Secret Server device validation error Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 07:12 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.