LWN Security Resources [LWN.net]

<!DOCTYPE html> <html lang="en"> <head><title>LWN Security Resources [LWN.net]</title> <meta name="viewport" content="width=device-width, initial-scale=1"> <meta HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=utf-8"> <META NAME="robots" CONTENT="noai, noimageai"> <link rel="icon" href="https://static.lwn.net/images/favicon.png" type="image/png"> <link rel="stylesheet" href="/CSS/lwn"> <link rel="stylesheet" href="/CSS/nosub"> <script type="text/javascript">var p="http",d="static";if(document.location.protocol=="https:"){p+="s";d="engine";}var z=document.createElement("script");z.type="text/javascript";z.async=true;z.src=p+"://"+d+".adzerk.net/ados.js";var s=document.getElementsByTagName("script")[0];s.parentNode.insertBefore(z,s);</script> <script type="text/javascript"> var ados_keywords = ados_keywords || []; if( location.protocol=='https:' ) { ados_keywords.push('T:SSL'); } else { ados_keywords.push('T:HTTP'); } var ados = ados || {}; ados.run = ados.run || []; ados.run.push(function() { ados_add_placement(4669, 20979, "azk13321_leaderboard", 4).setZone(16026); ados_add_placement(4669, 20979, "azk93271_right_zone", [5,10,6]).setZone(16027); ados_add_placement(4669, 20979, "azk31017_tracking", 20).setZone(20995); ados_setKeywords(ados_keywords.join(', ')); ados_load(); });</script> </head> <body> <a name="t"></a> <div id="menu"><a href="/"><img src="https://static.lwn.net/images/logo/barepenguin-70.png" class="logo" border="0" alt="LWN.net Logo"> <span class="logo">LWN<br>.net</span> <span class="logobl">News from the source</span></a> <a href="/"><img src="https://static.lwn.net/images/lcorner-ss.png" class="sslogo" border="0" alt="LWN"></a><div class="navmenu-container"> <ul class="navmenu"> <li><a class="navmenu" href="#t"><b>Content</b></a><ul><li><a href="/current/">Weekly Edition</a></li><li><a href="/Archives/">Archives</a></li><li><a href="/Search/">Search</a></li><li><a href="/Kernel/">Kernel</a></li><li><a href="/Security/">Security</a></li><li><a href="/Calendar/">Events calendar</a></li><li><a href="/Comments/unread">Unread comments</a></li><li><hr></li><li><a href="/op/FAQ.lwn">LWN FAQ</a></li><li><a href="/op/AuthorGuide.lwn">Write for us</a></li></ul></li> </ul></div> </div>  <div class="not-handset" style="margin-left: 10.5em; display: block;"> <div class="not-print"> <div id="azk13321_leaderboard"></div> </div> </div> <div class="topnav-container"> <div class="not-handset"><form action="https://lwn.net/Login/" method="post" name="loginform" class="loginform"> <label><b>User:</b> <input type="text" name="uname" value="" size="8" id="uc" /></label> <label><b>Password:</b> <input type="password" name="pword" size="8" id="pc" /></label> <input type="hidden" name="target" value="/Security/" /> <input type="submit" name="submit" value="Log in" /></form> | <form action="https://lwn.net/subscribe/" method="post" class="loginform"> <input type="submit" name="submit" value="Subscribe" /> </form> | <form action="https://lwn.net/Login/newaccount" method="post" class="loginform"> <input type="submit" name="submit" value="Register" /> </form> </div> <div class="handset-only"> <a href="/subscribe/"><b>Subscribe</b></a> / <a href="/Login/"><b>Log in</b></a> / <a href="/Login/newaccount"><b>New account</b></a> </div> </div><div class="maincolumn flexcol"> <div class="middlecolumn"> <div class="PageHeadline"> <h1>LWN Security Resources</h1> </div> <div class="ArticleText"> LWN.net offers several security-related resources, including the <a href="/Alerts/">security alert database</a> and the weekly edition security page. <p> <h3>The article index</h3> See <a href="/Security/Index/">the LWN Security Article index</a> for access to all LWN security articles, organized by topic. <p> <h3>Recent LWN.net security articles</h3> LWN runs security-oriented content regularly. Some of our more recent articles in this area include: <p> <blockquote> <table class="OddEven"> <tr><td>February 14, 2025</td><td><a href="/Articles/1008897/">Fighting the AI scraperbot scourge</a></td></tr><tr><td>January 21, 2025</td><td><a href="/Articles/1005302/">A look at the recent rsync vulnerability</a></td></tr><tr><td>November 19, 2024</td><td><a href="/Articles/998153/">Book review: Run Your Own Mail Server</a></td></tr><tr><td>November 12, 2024</td><td><a href="/Articles/996344/">Progress on toolchain security features</a></td></tr><tr><td>November 11, 2024</td><td><a href="/Articles/996955/">The top open-source security events in 2024</a></td></tr><tr><td>October 21, 2024</td><td><a href="/Articles/993787/">Python PGP proposal poses packaging puzzles</a></td></tr><tr><td>August 27, 2024</td><td><a href="/Articles/973231/">NIST finalizes post-quantum encryption standards</a></td></tr><tr><td>June 13, 2024</td><td><a href="/Articles/977720/">Improving control-flow integrity for Linux on RISC-V</a></td></tr><tr><td>June 12, 2024</td><td><a href="/Articles/978010/">Memory sealing for the GNU C Library</a></td></tr><tr><td>May 8, 2024</td><td><a href="/Articles/972467/">Securing Git repositories with gittuf</a></td></tr><tr><td>April 30, 2024</td><td><a href="/Articles/970818/">Security patterns and anti-patterns in embedded development</a></td></tr><tr><td>April 23, 2024</td><td><a href="/Articles/970070/">A change in direction for security-module stacking?</a></td></tr><tr><td>April 10, 2024</td><td><a href="/Articles/968600/">Continued attacks on HTTP/2</a></td></tr><tr><td>April 2, 2024</td><td><a href="/Articles/967192/">How the XZ backdoor works</a></td></tr><tr><td>March 12, 2024</td><td><a href="/Articles/964392/">Insecurity and Python pickles</a></td></tr><tr><td>February 21, 2024</td><td><a href="/Articles/962588/">Sudo and its alternatives</a></td></tr><tr><td>February 14, 2024</td><td><a href="/Articles/961978/">A turning point for CVE numbers</a></td></tr><tr><td>February 12, 2024</td><td><a href="/Articles/961086/">Another runc container breakout</a></td></tr><tr><td>February 8, 2024</td><td><a href="/Articles/961121/">Pitchforks for RDSEED</a></td></tr><tr><td>January 31, 2024</td><td><a href="/Articles/959562/">OpenBSD system-call pinning</a></td></tr></table></blockquote> <h3>Recent security alerts</h3> <blockquote> <table cellpadding=3> <tr><th>Distribution</th><th>ID</th><th>Package</th><th>Date</th></tr> <tr class="Odd"> <td><a href="/Alerts/Fedora/">Fedora</a></td> <td><a href="/Articles/1017024/">FEDORA-2025-3a7a29de24</a></td> <td>ghostscript</td><td>2025-04-10</td></tr> <tr class="Even"> <td><a href="/Alerts/SUSE/">SUSE</a></td> <td><a href="/Articles/1017029/">SUSE-SU-2025:1193-1</a></td> <td>apparmor</td><td>2025-04-10</td></tr> <tr class="Odd"> <td><a href="/Alerts/Red_Hat/">Red Hat</a></td> <td><a href="/Articles/1017017/">RHSA-2025:3772-01</a></td> <td>go-toolset:rhel8</td><td>2025-04-10</td></tr> <tr class="Even"> <td><a href="/Alerts/Mageia/">Mageia</a></td> <td><a href="/Articles/1017027/">MGASA-2025-0131</a></td> <td>xz</td><td>2025-04-10</td></tr> <tr class="Odd"> <td><a href="/Alerts/Mageia/">Mageia</a></td> <td><a href="/Articles/1017025/">MGASA-2025-0129</a></td> <td>atop</td><td>2025-04-10</td></tr> <tr class="Even"> <td><a href="/Alerts/Mageia/">Mageia</a></td> <td><a href="/Articles/1017026/">MGASA-2025-0130</a></td> <td>docker-containerd</td><td>2025-04-10</td></tr> <tr class="Odd"> <td><a href="/Alerts/Ubuntu/">Ubuntu</a></td> <td><a href="/Articles/1017041/">USN-7346-3</a></td> <td>opensc</td><td>2025-04-10</td></tr> <tr class="Even"> <td><a href="/Alerts/Ubuntu/">Ubuntu</a></td> <td><a href="/Articles/1017036/">USN-7430-1</a></td> <td>dino-im</td><td>2025-04-10</td></tr> <tr class="Odd"> <td><a href="/Alerts/SUSE/">SUSE</a></td> <td><a href="/Articles/1017035/">openSUSE-SU-2025:14976-1</a></td> <td>libpoppler-cpp2</td><td>2025-04-09</td></tr> <tr class="Even"> <td><a href="/Alerts/AlmaLinux/">AlmaLinux</a></td> <td><a href="/Articles/1017021/">ALSA-2025:3683</a></td> <td>tomcat</td><td>2025-04-09</td></tr> <tr class="Odd"> <td><a href="/Alerts/Red_Hat/">Red Hat</a></td> <td><a href="/Articles/1016893/">RHSA-2025:3698-01</a></td> <td>opentelemetry-collector</td><td>2025-04-09</td></tr> <tr class="Even"> <td><a href="/Alerts/Fedora/">Fedora</a></td> <td><a href="/Articles/1016904/">FEDORA-2025-9a271ccfb3</a></td> <td>thunderbird</td><td>2025-04-09</td></tr> <tr class="Odd"> <td><a href="/Alerts/Red_Hat/">Red Hat</a></td> <td><a href="/Articles/1016894/">RHSA-2025:3618-01</a></td> <td>grafana</td><td>2025-04-09</td></tr> <tr class="Even"> <td><a href="/Alerts/SUSE/">SUSE</a></td> <td><a href="/Articles/1017033/">SUSE-SU-2025:1183-1</a></td> <td>kernel</td><td>2025-04-09</td></tr> <tr class="Odd"> <td><a href="/Alerts/Ubuntu/">Ubuntu</a></td> <td><a href="/Articles/1016920/">USN-7427-1</a></td> <td>dotnet8, dotnet9</td><td>2025-04-09</td></tr> <tr class="Even"> <td><a href="/Alerts/Red_Hat/">Red Hat</a></td> <td><a href="/Articles/1016892/">RHSA-2025:3713-01</a></td> <td>webkit2gtk3</td><td>2025-04-09</td></tr> <tr class="Odd"> <td><a href="/Alerts/Fedora/">Fedora</a></td> <td><a href="/Articles/1016903/">FEDORA-2025-66ce799182</a></td> <td>mariadb10.11</td><td>2025-04-09</td></tr> <tr class="Even"> <td><a href="/Alerts/Debian/">Debian</a></td> <td><a href="/Articles/1017023/">DSA-5898-1</a></td> <td>chromium</td><td>2025-04-09</td></tr> <tr class="Odd"> <td><a href="/Alerts/Debian/">Debian</a></td> <td><a href="/Articles/1016900/">DLA-4122-1</a></td> <td>libbssolv-perl</td><td>2025-04-09</td></tr> <tr class="Even"> <td><a href="/Alerts/SUSE/">SUSE</a></td> <td><a href="/Articles/1017034/">openSUSE-SU-2025:14975-1</a></td> <td>libmozjs-128-0</td><td>2025-04-09</td></tr> </table> </blockquote> <p>View the <a href="/Alerts/">full security alert database</a>. </div>  </div>  <div class="rightcol not-print"> <div id="azk93271_right_zone"></div> </div> </div>  <br clear="all"> <center> <P> <span class="ReallySmall"> Copyright © 2025, Eklektix, Inc.<BR> Comments and public postings are copyrighted by their creators.<br> Linux is a registered trademark of Linus Torvalds<br> </span> </center> </body></html>

CINXE.COM

LWN Security Resources [LWN.net]