ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. mm/damon/core: error damos_commit_quota_goal() for zero target_value Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  2. pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaper Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  3. KEYS: Fix key_reject_and_link() race with keyring restriction Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  4. ntfs: fix resident conversion in ntfs_new_attr_flags Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  5. drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  6. Teams PowerShell module release notes Guidance changed3 linked entries across history · in Admin tools Follow evidence and connection reasons
  7. Scribus before 1.6.7 Heap Out-of-Bounds Write via PSD Image Loader Affected-version evidence changed: Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Out-of-Bounds Write via PSD Image Loader2 linked entries across history · in Security Follow evidence and connection reasons
  8. Scribus before 1.6.7 Heap Buffer Overflow via PICT Pixmap Loader Affected-version evidence changed: Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Buffer Overflow via PICT Pixmap Loader2 linked entries across history · in Security Follow evidence and connection reasons
  9. Scribus before 1.6.7 Out-of-Bounds Read via PICT Planar Image Data Affected-version evidence changed: Scribus before 1.6.7 and 1.7.x before 1.7.4 Out-of-Bounds Read via PICT Planar Image Data2 linked entries across history · in Security Follow evidence and connection reasons
  10. Scribus before 1.6.7 Heap Overflow via TIFF Tile Buffer Handling Affected-version evidence changed: Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Overflow via TIFF Tile Buffer Handling2 linked entries across history · in Security Follow evidence and connection reasons
  11. Scribus before 1.6.7 Heap Out-of-Bounds Write via Micrografx Draw Import Affected-version evidence changed: Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Out-of-Bounds Write via Micrografx Draw Import2 linked entries across history · in Security Follow evidence and connection reasons
  12. Scribus before 1.6.7 Heap Buffer Overflow via PICT 4-bit Pixel Unpacking Affected-version evidence changed: Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Buffer Overflow via PICT 4-bit Pixel Unpacking2 linked entries across history · in Security Follow evidence and connection reasons
  13. Scribus before 1.6.7 Out-of-Bounds Memory Access via SVM Import Plugin Affected-version evidence changed: Scribus before 1.6.7 and 1.7.x before 1.7.4 Out-of-Bounds Memory Access via SVM Import Plugin2 linked entries across history · in Security Follow evidence and connection reasons
  14. Konflux-ci: github token plaintext exposure in ci/cd scripts Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  15. Konflux-ci: jq filter injection in github workflow issue management Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  16. Konflux-ci: remote code execution via eval() in manifest scripts Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  17. Konflux-ci: ui proxy skips backend tls verification on non-openshift clusters, leaking a token that can impersonate anyone Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  18. In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon trusted compromised intermediate certificates Affected-version evidence changed: In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 2026.2.4; CLion before 2026.3 and 2026.2.4.1; DataGrip before 2026.3 and 2026.2.6.1; RustRover before …2 linked entries across history · in Security Follow evidence and connection reasons
  19. pybars3 through 0.9.7 Code Injection via Bracketed Path Segments Affected-version evidence changed: pybars3 through 0.9.7 and pybars4 through 0.9.13 Code Injection via Bracketed Path Segments2 linked entries across history · in Security Follow evidence and connection reasons
  20. WordPress VikRentCar plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerability Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  21. In loadDescription of DeviceAdminAdd.java, there is a possible denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for… Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  22. DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  23. Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradle Advisory content revised: Nx is a monorepo solution for TypeScript and polyglot codebases. From 22.0.2 until 22.7.9 and 23.1.2 for @nx/maven, and from 21.0.0 until 22.7.9 and 23.1.2 for @nx/gradle, the plugins' project-graph analyzers launch through a shell and inte…4 linked entries across history · in Security Follow evidence and connection reasons
  24. pageant: unbounded frame buffering on peer-controlled 4-byte length prefix (memory-exhaustion DoS) Advisory content revised: pageant provides a PageantStream type that implements AsyncRead and AsyncWrite traits and can be used to communicate with a running Pageant instance. From 0.2.0 until 0.2.5, PageantStream::new in pageant/src/wmmessage.rs trusts a peer-contr…3 linked entries across history · in Security Follow evidence and connection reasons
  25. @sigstore/oci sends the registry Authorization header to a cross-host blob-upload Location Advisory content revised: sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.2, packages/oci/src/registry.ts contains a RegistryClient.signIn() method that stores registry Authorization and Docker configuration headers as …3 linked entries across history · in Security Follow evidence and connection reasons
  26. joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service Advisory content revised: joi is a schema description language and data validator for JavaScript. From 17.1.1 until 17.13.9 and 18.3.1, the Joi.string().email({ multiple: true }) rule uses a separator regular expression whose leading whitespace quantifier is retried…3 linked entries across history · in Security Follow evidence and connection reasons
  27. Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal Advisory content revised: Glob matches files using patterns the shell uses. From 9.0.0 until 14.0.2, abort branches in src/walker.ts, including GlobUtil.walkCB(), GlobUtil.walkCB2(), GlobUtil.walkCBSync(), and GlobUtil.walkCB2Sync(), invoke the callbacks without ret…3 linked entries across history · in Security Follow evidence and connection reasons
  28. Nuxt dev server arbitrary file read through client error reports Advisory content revised: Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, a client with TCP access to an exposed Nuxt development server can send a nuxt:dev:client-error event over the HMR socket with an absolute file path at the…3 linked entries across history · in Security Follow evidence and connection reasons
  29. Nuxt dev server exposes private runtime config through the Nitro dev bundle Advisory content revised: Nuxt is an open-source web development framework for Vue.js. From 3.0.0 until 4.6.3, the Nuxt development server can expose the Nitro 2 development bundle at <buildDir>/dev/index.mjs through Vite file serving when the server is reachable ov…3 linked entries across history · in Security Follow evidence and connection reasons
  30. Nuxt: Dot segments in the request path bypass `server/middleware` path checks and server route rules on page routes Advisory content revised: Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, Nuxt resolves literal or percent-encoded dot segments before rendering a page while Nitro routing, server/middleware checks, and server route rules evaluat…3 linked entries across history · in Security Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources last checked 13 Nov 08:15 UTC · 274 of 275 readable · 272 fully read · checking again after a restart · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.