ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. Secret Server partial login bypass Affected-version evidence changed: Secret Server Authentication Bypass via Unauthenticated Pin Code Reset and Brute Force2 linked entries across history · in Security Follow evidence and connection reasons
  2. Secret Server JWT issuance error Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  3. WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.6 - Cross Site Scripting (XSS) vulnerability Affected-version evidence changed: WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerability2 linked entries across history · in Security Follow evidence and connection reasons
  4. 389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of service Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  5. Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099) Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  6. Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  7. Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  8. Criu: criu: container escape via rseq critical section hijack during checkpoint/restore Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  9. Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  10. Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  11. Podman: podman: quadlet install --replace non-truncating write retains removed host-access directives Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  12. Rust-rpm-sequoia: rust-rpm-sequoia: denial of service via crafted rpm file during signature verification Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  13. Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  14. Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  15. Gimp: gimp apng loader heap-buffer-overflow when fctl width exceeds ihdr width (file-png.c) Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  16. dcmjs: DS/IS VALUE REPRESENTATION INPUT VALIDATION BYPASS Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  17. Gimp: gimp: heap buffer overflow in read_channel_data() Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  18. Gimp: gimp: stack buffer overflow in pnmscanner_gettoken() Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  19. Gimp: gimp: integer overflow in read_rle_channel() Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  20. Gimp: gimp: arbitrary code execution in psd plugin due to unsigned underflow Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  21. Libsoup: libsoup: http request smuggling via unsigned to signed conversion error Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  22. Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  23. Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  24. Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  25. Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  26. Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  27. Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  28. Cri-o: cri-o checkpoint restore bypasses destination security context Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  29. Redis: redis: out-of-bounds read via crafted cluster bus packets Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  30. Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 08:15 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.