You are not logged in.
- Topics: Active | Unanswered
#1 2026-07-22 08:26:20
- vt_dev
- Member
- Registered: 2026-07-22
- Posts: 1
No New Security Advisories since June 2025?
Hello Arch community,
I was wondering if anyone can shed some light on the current situation with Arch Security Advisories.
According to this page: https://security.archlinux.org/advisory they stopped being published in June 2025, with some scheduled advisories that never got published. I see in the history that there have been some other long gaps between published advisories in the past, but does anyone know when/if they will resume?
Offline
#2 2026-07-31 08:57:04
- Lone_Wolf
- Administrator
- From: Netherlands, Europe
- Registered: 2005-10-04
- Posts: 15,348
Re: No New Security Advisories since June 2025?
https://wiki.archlinux.org/title/Arch_Security_Team links to arch-audit issue which indicates the security tracker is currently not working.
Disliking systemd intensely, but not satisfied with alternatives so focusing on taming systemd.
clean chroot building not flexible enough ?
Try clean chroot manager by graysky
Offline
#3 2026-07-31 10:40:32
- mpan
- Member
- Registered: 2012-08-01
- Posts: 1,639
- Website
Re: No New Security Advisories since June 2025?
Lone_Wolf: while we’re on this topic, may I ask for somebody in contact with schard to ping him about pointing to security.archlinux.org, like that happened in that thread? I have no options other than venues not exactly meant for that purpose, like Wiki talk pages. Thanks in advance.
Offline
#4 2026-08-09 00:59:05
- loqs
- Member
- Registered: 2014-03-06
- Posts: 19,013
Re: No New Security Advisories since June 2025?
The Arch security team currently has four members. Off gitlab activity two are active on average once a month, one twice a month with the last having activity most weeks.
Offline
#5 2026-08-09 09:58:04
- schard
- Forum Moderator
- From: Hannover
- Registered: 2016-05-06
- Posts: 2,680
- Website
Re: No New Security Advisories since June 2025?
@mpan I am also reading these forums more or less regularly.
I was unaware of the security tracker being non-functional up until today.
This does not change the action on the post you linked to though, since the solution was already provided in the linked article.
If the security tracker is actually down for a prolonged time, this should at least be mentioned with a big fat warning on its landing page.
People like me, who use it to update themselves on vulnerable packages are otherwise left with a false sense of security of new vulnerabilities not affecting Arch.
Just leaving it sit there not being updated defeats counteracts its purpose.
Inofficial first vice president of the Rust Evangelism Strike Force
Offline
#6 2026-08-09 11:47:29
- mpan
- Member
- Registered: 2012-08-01
- Posts: 1,639
- Website
Re: No New Security Advisories since June 2025?
Schard, my comment wasn’t about your action as a moderator, or about pointing to Archie1 the article they linked answers the question. This was after all the basis of my own answer to them. 
My comment was about sending users to security.archlinux.org. In this case I also received it as written in a tone similar to RTFM or LMGTFY. And that’s not useful, if security.archlinux.org is basically dead and checking it brings no answer in almost all cases.
The reason I asked for somebody to poke you is what you outlined here in the second paragraph. Not only it will not help people, but the at this point it may even have the opposite effect.
Offline