LWN Security Resources [LWN.net]

<!DOCTYPE html> <html lang="en"> <head><title>LWN Security Resources [LWN.net]</title> <meta name="viewport" content="width=device-width, initial-scale=1"> <meta HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=utf-8"> <META NAME="robots" CONTENT="noai, noimageai"> <link rel="icon" href="https://static.lwn.net/images/favicon.png" type="image/png"> <link rel="stylesheet" href="/CSS/lwn"> <link rel="stylesheet" href="/CSS/nosub"> <script type="text/javascript">var p="http",d="static";if(document.location.protocol=="https:"){p+="s";d="engine";}var z=document.createElement("script");z.type="text/javascript";z.async=true;z.src=p+"://"+d+".adzerk.net/ados.js";var s=document.getElementsByTagName("script")[0];s.parentNode.insertBefore(z,s);</script> <script type="text/javascript"> var ados_keywords = ados_keywords || []; if( location.protocol=='https:' ) { ados_keywords.push('T:SSL'); } else { ados_keywords.push('T:HTTP'); } var ados = ados || {}; ados.run = ados.run || []; ados.run.push(function() { ados_add_placement(4669, 20979, "azk13321_leaderboard", 4).setZone(16026); ados_add_placement(4669, 20979, "azk93271_right_zone", [5,10,6]).setZone(16027); ados_add_placement(4669, 20979, "azk31017_tracking", 20).setZone(20995); ados_setKeywords(ados_keywords.join(', ')); ados_load(); });</script> </head> <body> <a name="t"></a> <div id="menu"><a href="/"><img src="https://static.lwn.net/images/logo/barepenguin-70.png" class="logo" border="0" alt="LWN.net Logo"> <span class="logo">LWN<br>.net</span> <span class="logobl">News from the source</span></a> <a href="/"><img src="https://static.lwn.net/images/lcorner-ss.png" class="sslogo" border="0" alt="LWN"></a><div class="navmenu-container"> <ul class="navmenu"> <li><a class="navmenu" href="#t"><b>Content</b></a><ul><li><a href="/current/">Weekly Edition</a></li><li><a href="/Archives/">Archives</a></li><li><a href="/Search/">Search</a></li><li><a href="/Kernel/">Kernel</a></li><li><a href="/Security/">Security</a></li><li><a href="/Calendar/">Events calendar</a></li><li><a href="/Comments/unread">Unread comments</a></li><li><hr></li><li><a href="/op/FAQ.lwn">LWN FAQ</a></li><li><a href="/op/AuthorGuide.lwn">Write for us</a></li></ul></li> </ul></div> </div>  <div class="not-handset" style="margin-left: 10.5em; display: block;"> <div class="not-print"> <div id="azk13321_leaderboard"></div> </div> </div> <div class="topnav-container"> <div class="not-handset"><form action="https://lwn.net/Login/" method="post" name="loginform" class="loginform"> <label><b>User:</b> <input type="text" name="uname" value="" size="8" id="uc" /></label> <label><b>Password:</b> <input type="password" name="pword" size="8" id="pc" /></label> <input type="hidden" name="target" value="/Security/" /> <input type="submit" name="submit" value="Log in" /></form> | <form action="https://lwn.net/subscribe/" method="post" class="loginform"> <input type="submit" name="submit" value="Subscribe" /> </form> | <form action="https://lwn.net/Login/newaccount" method="post" class="loginform"> <input type="submit" name="submit" value="Register" /> </form> </div> <div class="handset-only"> <a href="/subscribe/"><b>Subscribe</b></a> / <a href="/Login/"><b>Log in</b></a> / <a href="/Login/newaccount"><b>New account</b></a> </div> </div><div class="maincolumn flexcol"> <div class="middlecolumn"> <div class="PageHeadline"> <h1>LWN Security Resources</h1> </div> <div class="ArticleText"> LWN.net offers several security-related resources, including the <a href="/Alerts/">security alert database</a> and the weekly edition security page. <p> <h3>The article index</h3> See <a href="/Security/Index/">the LWN Security Article index</a> for access to all LWN security articles, organized by topic. <p> <h3>Recent LWN.net security articles</h3> LWN runs security-oriented content regularly. Some of our more recent articles in this area include: <p> <blockquote> <table class="OddEven"> <tr><td>November 19, 2024</td><td><a href="/Articles/998153/">Book review: Run Your Own Mail Server</a></td></tr><tr><td>November 12, 2024</td><td><a href="/Articles/996344/">Progress on toolchain security features</a></td></tr><tr><td>November 11, 2024</td><td><a href="/Articles/996955/">The top open-source security events in 2024</a></td></tr><tr><td>October 21, 2024</td><td><a href="/Articles/993787/">Python PGP proposal poses packaging puzzles</a></td></tr><tr><td>August 27, 2024</td><td><a href="/Articles/973231/">NIST finalizes post-quantum encryption standards</a></td></tr><tr><td>June 13, 2024</td><td><a href="/Articles/977720/">Improving control-flow integrity for Linux on RISC-V</a></td></tr><tr><td>June 12, 2024</td><td><a href="/Articles/978010/">Memory sealing for the GNU C Library</a></td></tr><tr><td>May 8, 2024</td><td><a href="/Articles/972467/">Securing Git repositories with gittuf</a></td></tr><tr><td>April 30, 2024</td><td><a href="/Articles/970818/">Security patterns and anti-patterns in embedded development</a></td></tr><tr><td>April 23, 2024</td><td><a href="/Articles/970070/">A change in direction for security-module stacking?</a></td></tr><tr><td>April 10, 2024</td><td><a href="/Articles/968600/">Continued attacks on HTTP/2</a></td></tr><tr><td>April 2, 2024</td><td><a href="/Articles/967192/">How the XZ backdoor works</a></td></tr><tr><td>March 12, 2024</td><td><a href="/Articles/964392/">Insecurity and Python pickles</a></td></tr><tr><td>February 21, 2024</td><td><a href="/Articles/962588/">Sudo and its alternatives</a></td></tr><tr><td>February 14, 2024</td><td><a href="/Articles/961978/">A turning point for CVE numbers</a></td></tr><tr><td>February 12, 2024</td><td><a href="/Articles/961086/">Another runc container breakout</a></td></tr><tr><td>February 8, 2024</td><td><a href="/Articles/961121/">Pitchforks for RDSEED</a></td></tr><tr><td>January 31, 2024</td><td><a href="/Articles/959562/">OpenBSD system-call pinning</a></td></tr><tr><td>January 26, 2024</td><td><a href="/Articles/959189/">Better handling of integer wraparound in the kernel</a></td></tr><tr><td>January 10, 2024</td><td><a href="/Articles/957219/">The odd saga of CVE-2012-5639</a></td></tr></table></blockquote> <h3>Recent security alerts</h3> <blockquote> <table cellpadding=3> <tr><th>Distribution</th><th>ID</th><th>Package</th><th>Date</th></tr> <tr class="Odd"> <td><a href="/Alerts/Oracle/">Oracle</a></td> <td><a href="/Articles/1001579/">ELSA-2024-9654</a></td> <td>libsoup</td><td>2024-12-10</td></tr> <tr class="Even"> <td><a href="/Alerts/Ubuntu/">Ubuntu</a></td> <td><a href="/Articles/1001592/">USN-7146-1</a></td> <td>dogtag-pki</td><td>2024-12-10</td></tr> <tr class="Odd"> <td><a href="/Alerts/Fedora/">Fedora</a></td> <td><a href="/Articles/1001575/">FEDORA-2024-bcdea6e995</a></td> <td>zabbix</td><td>2024-12-10</td></tr> <tr class="Even"> <td><a href="/Alerts/Oracle/">Oracle</a></td> <td><a href="/Articles/1001578/">ELSA-2024-9654</a></td> <td>libsoup</td><td>2024-12-10</td></tr> <tr class="Odd"> <td><a href="/Alerts/Fedora/">Fedora</a></td> <td><a href="/Articles/1001566/">FEDORA-2024-ab8945c2bd</a></td> <td>python-multipart</td><td>2024-12-10</td></tr> <tr class="Even"> <td><a href="/Alerts/SUSE/">SUSE</a></td> <td><a href="/Articles/1001588/">SUSE-SU-2024:4272-1</a></td> <td>nodejs18</td><td>2024-12-10</td></tr> <tr class="Odd"> <td><a href="/Alerts/Fedora/">Fedora</a></td> <td><a href="/Articles/1001574/">FEDORA-2024-0d14d0d2f9</a></td> <td>rust-rustls</td><td>2024-12-10</td></tr> <tr class="Even"> <td><a href="/Alerts/Fedora/">Fedora</a></td> <td><a href="/Articles/1001570/">FEDORA-2024-aa246ab1a3</a></td> <td>retsnoop</td><td>2024-12-10</td></tr> <tr class="Odd"> <td><a href="/Alerts/Fedora/">Fedora</a></td> <td><a href="/Articles/1001573/">FEDORA-2024-5a5f401785</a></td> <td>rust-rustls</td><td>2024-12-10</td></tr> <tr class="Even"> <td><a href="/Alerts/Oracle/">Oracle</a></td> <td><a href="/Articles/1001577/">ELSA-2024-12868</a></td> <td>kernel</td><td>2024-12-10</td></tr> <tr class="Odd"> <td><a href="/Alerts/Ubuntu/">Ubuntu</a></td> <td><a href="/Articles/1001594/">USN-7141-1</a></td> <td>ofono</td><td>2024-12-10</td></tr> <tr class="Even"> <td><a href="/Alerts/AlmaLinux/">AlmaLinux</a></td> <td><a href="/Articles/1001562/">ALSA-2024:10830</a></td> <td>postgresql:15</td><td>2024-12-10</td></tr> <tr class="Odd"> <td><a href="/Alerts/AlmaLinux/">AlmaLinux</a></td> <td><a href="/Articles/1001563/">ALSA-2024:10831</a></td> <td>postgresql:16</td><td>2024-12-10</td></tr> <tr class="Even"> <td><a href="/Alerts/Fedora/">Fedora</a></td> <td><a href="/Articles/1001567/">FEDORA-2024-92de63698e</a></td> <td>python-python-multipart</td><td>2024-12-10</td></tr> <tr class="Odd"> <td><a href="/Alerts/Fedora/">Fedora</a></td> <td><a href="/Articles/1001571/">FEDORA-2024-ccce2763b0</a></td> <td>rust-rbspy</td><td>2024-12-10</td></tr> <tr class="Even"> <td><a href="/Alerts/Fedora/">Fedora</a></td> <td><a href="/Articles/1001572/">FEDORA-2024-aa246ab1a3</a></td> <td>rust-rbspy</td><td>2024-12-10</td></tr> <tr class="Odd"> <td><a href="/Alerts/Fedora/">Fedora</a></td> <td><a href="/Articles/1001568/">FEDORA-2024-340a4bdc5d</a></td> <td>python3.12</td><td>2024-12-10</td></tr> <tr class="Even"> <td><a href="/Alerts/Fedora/">Fedora</a></td> <td><a href="/Articles/1001569/">FEDORA-2024-ccce2763b0</a></td> <td>retsnoop</td><td>2024-12-10</td></tr> <tr class="Odd"> <td><a href="/Alerts/Oracle/">Oracle</a></td> <td><a href="/Articles/1001576/">ELSA-2024-12868</a></td> <td>kernel</td><td>2024-12-10</td></tr> <tr class="Even"> <td><a href="/Alerts/AlmaLinux/">AlmaLinux</a></td> <td><a href="/Articles/1001564/">ALSA-2024:10834</a></td> <td>ruby:3.1</td><td>2024-12-09</td></tr> </table> </blockquote> <p>View the <a href="/Alerts/">full security alert database</a>. </div>  </div>  <div class="rightcol not-print"> <div id="azk93271_right_zone"></div> </div> </div>  <br clear="all"> <center> <P> <span class="ReallySmall"> Copyright © 2024, Eklektix, Inc.<BR> Comments and public postings are copyrighted by their creators.<br> Linux is a registered trademark of Linus Torvalds<br> </span> </center> </body></html>

CINXE.COM

LWN Security Resources [LWN.net]