Alpine Linux :alpine:

Alpine Linux is a security-oriented, lightweight Linux distribution based on musl libc and busybox.

Website: https://alpinelinux.org

Public Key

npub1cmlp6xnny9sr4a9sjk4946z7eh7f86h9ca75c797d802pq0w8grsmucwhf

NIP-05 Address

[email protected]

Profile Code

nprofile1qqsvdlsarfejzcp67jcft2j6ap0vmlynatjuwl2v0zlxnh4qs8hr5pcpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dswfm0r2

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1cmlp6xnny9sr4a9sjk4946z7eh7f86h9ca75c797d802pq0w8grsmucwhf

Show more details

Last Notes

2026-05-17 19:40:11 CEST

- reply

We don't have any particular documentation about making a distribution derived from Alpine Linux as far as I know, let alone something in Chinese.
We do have a small Chinese user group in the #alpine-zh channel on irc.oftc.net.

2026-05-16 17:12:31 CEST

- reply

You are right, checked the commit logs of each branch, and it includes 'ptrace: slightly saner 'get_dumpable()' logic', which is indeed about ssh-keysign-pwn.
I've edited the post to make that clear.

2026-05-16 15:19:56 CEST

- reply

The OS upgrades have been performed, and gitlab is back. The gitlab upgrade itself still needs to be done, and will be postponed.

2026-05-16 14:45:34 CEST

In 15 minutes (13:00 UTC), we will perform OS and gitlab updates, and gitlab will be unavailable while the work is ongoing. Expected downtime is about 15 minutes.

2026-05-16 13:50:43 CEST

New stable kernels landed today in Alpine Linux. They address the Fragnesia CVE (CVE-2026-46300), and the vulnerabilities that came before it.
- 6.18.31
- 6.12.89
- 6.6.139
- 5.15.207
- 5.10.256
These have been backported all the way down to Alpine Linux 3.16.

2026-05-08 13:59:42 CEST

- reply

You are right, jumbling too much with all these CVEs.
CVE-2026-43500 is the new one that is not fixed yet.

2026-05-08 13:49:48 CEST

- reply

https://www.openwall.com/lists/oss-security/2026/05/08/8

2026-05-08 13:22:54 CEST

2 new vulnerabilities similar to coyfail:
- CVE-2026-31431 (Dirty Frag)
- CVE-2026-43284
https://github.com/V4bel/dirtyfrag
We're waiting for a release containing the last one before pushing new kernels to aports.
https://github.com/V4bel/dirtyfrag#cleanup mentions a mitigation in the meantime.

2026-05-04 17:48:22 CEST

- reply

The suspension has been lifted, the servers are online again.

2026-05-04 17:13:38 CEST

All our systems hosted at Linode are suspended at the moment due to some billing issue, including gitlab. We are working with them to get it resolved.
#AlpineLinux

2026-05-02 16:56:34 CEST

- reply

It has been fixed in edge, I've created a merge request to backport it to 3.23.
I don't know when 6.18 will come. It relies on a set of patches that need to be rebased.

2026-05-02 16:48:56 CEST

- reply

The linux-rpi kernel has only been updated in edge, it apparently still needs to be backported.

2026-05-01 17:52:30 CEST

Releases are still pending, but our repositories all received upgraded kernels to address copy.fail (CVE-2026-31431).
So make sure you upgrade to the latest available kernels.
edge: >= linux-lts-6.18.22
3.23: >= linux-lts-6.18.22
3.22: >= linux-lts-6.12.85
3.21: >= linux-lts-6.12.85
3.20: >= linux-lts-6.6.137
3.l9: >= linux-lts-6.6.137
3,18: >= linux-lts-6.1.170
3.17: >= linux-lts-5.15.204
#AlpineLinux #security

2026-04-15 17:18:57 CEST

The Alpine Linux project is pleased to announce the availability of new stable releases:
3.20.10
3.21.7
3.22.4
3.23.4
These releases include security fixes across core components.
musl (2 CVEs)
openssl (6 CVEs)
zlib (2 CVEs)
See https://alpinelinux.org/posts/Alpine-3.20.10-3.21.7-3.22.4-3.23.4-released.html for more details
#AlpineLinux

2026-01-27 23:16:05 CET

The Alpine Linux project is pleased to announce the immediate availability of new stable releases:
3.20.9
3.21.6
3.22.3
3.23.3
These updates include security fixes for OpenSSL addressing the January 27, 2026 advisory: https://openssl-library.org/news/secadv/20260127.txt
https://alpinelinux.org/posts/Alpine-3.20.9-3.21.6-3.22.3-3.23.3-released.html
#AlpineLinux

2026-01-19 22:52:14 CET

We lost a major infrastructure sponsor, but reached out to the community and gained several new ones. We are thankful for the companies who provided us with servers and bandwidth and everyone who donated financially.
https://alpinelinux.org/posts/2026-01-18-new-sponsors-strenghten-infrastructure.html
#AlpineLinux #FOSS

2025-12-04 16:14:10 CET

- reply

We got the VPS through someone in the Alpine Linux project that knows them.

2025-12-04 15:48:51 CET

- reply

We would also like to thank our existing sponsors. Without them Alpine Linux would not be able to scale to what it is now:
- Fastly, covering the huge amount of bandwidth used by cdn.alpinelinux.org
- Linode: Most of our non-package infrastructure runs there, very stable.
- vpsfree: sponsoring a VPS with ever increasing amount of storage required for the master mirror.

2025-12-03 21:43:12 CET

Alpine Linux 3.23.0 Released 🎉
We are pleased to announce the release of Alpine Linux 3.23.0, the first release in the v3.23 stable series.
Which includes
- apk-tools version 3
- linux-stable replacing linux-edge
- Any many other changes
Thanks to all the contributors helping to get this released!
We also want to thank the new sponsors that stepped in after Equinix Metal sunsetted:
- Cherry Servers
- Netmountains
- Osso B.V.
- CloudOn
- HorizonIQ
https://alpinelinux.org/posts/Alpine-3.23.0-released.html
#AlpineLinux

2025-10-09 19:42:42 CEST

- reply

Cloud images for these releases are now available as well.
https://www.alpinelinux.org/cloud/
#AlpineLinux

2025-10-08 17:09:54 CEST

- reply

The host is reachable again and able to upload packages (including the new release).

2025-10-08 16:22:15 CEST

We're happy to announce that Alpine 3.19.9, 3.20.8, 3.21.5 and 3.22.2 are released.
These updates include security fixes for OpenSSL addressing the September 30, 2025 advisory (CVE-2025-9230, CVE-2025-9231, CVE-2025-9232).
https://alpinelinux.org/posts/Alpine-3.19.9-3.20.8-3.21.5-3.22.2-released.html
#AlpineLinux

2025-10-06 12:52:22 CEST

The aarch64 build host (hosting aarch64, armv7 and armhf builders) currently has network issues and cannot build and upload new packages.
We are in contact with the hoster and they are looking into it.

2025-08-15 17:31:59 CEST

We just added the new hosted servers we received due to the Equinix Metal discontinuation as backend to cdn.alpinelinux.org. The metrics looks well so far.
If all goes well, we can remove the equinix servers from the backend.
Thanks to Netmountains, Osso, HorizonIQ and Cherry Servers for sponsoring the HW/Hosting.
Thanks Fastly as well for offloading so much bandwidth for us (2k to 4k requests/s).

2025-06-27 09:48:50 CEST

We'd like to welcome @npub18t0…vjrt and Mio as new Alpine Linux developers.
We really appreciate all the work they and the rest of the community have done.
#AlpineLinux

2025-05-30 17:34:27 CEST

We'd like to announce that Alpine Linux 3.22.0 Released.
https://alpinelinux.org/posts/Alpine-3.22.0-released.html
A big thanks to all the contributors and users providing feedback.
We also like to thank all the sponsors who help us by providing critical infrastructure.
#AlpineLinux

2025-03-29 19:59:04 CET

- reply

Gracias 🙂

2025-03-29 19:42:33 CET

- reply

All arches except x86_64 and aarch64 finished the rebuilds. Deno is the only blocker left.

2025-03-29 10:57:21 CET

- reply

Deno has a failing test that prevents it from being built:
https://gitlab.alpinelinux.org/alpine/aports/-/issues/17030

2025-03-28 07:24:06 CET

- reply

Thanks to Mio, dovecot, tectonic and tinyfugue have been fixed now.

2025-03-27 20:31:11 CET

- reply

Help is appreciated fixing broken packages.
For example dovecot seems to be broken on 32-bits arches ("size of unnamed array is negative").
Tectonic fails to build as well.

2025-03-27 20:27:51 CET

Heads up, icu-76 has been pushed to edge. The builders will be busy for a while rebuilding all dependencies, and there appear to be some build failures.
The community repository is broken at the moment until the builders finish rebuilding affected packages and upload it.
Build status can be tracked at https://build.alpinelinux.org/
#AlpineLinux

2025-02-15 21:42:29 CET

- reply

Everything went smooth and the server is online and available again.

2025-02-15 17:50:12 CET

Heads up, the server hosting the Alpine Linux ARM related builders (aarch64, armv7, armhf) is being physically moved and will be unavailable. We expect it to be back tomorrow.
#AlpineLinux

2025-02-04 21:35:04 CET

- reply

This post and similar from other projects did stir up quite some discussion.
We did receive quite a number of offers for sponsoring hardware / hosting and related. We are working through it now and evaluating each option.

2025-02-03 17:51:40 CET

Alpine Linux needs your help, a significant sponsorship will end soon.
This post explains what is affected and how you can help:
https://alpinelinux.org/posts/Seeking-Support-After-Equinix-Metal-Sunsets.html
#AlpineLinux

2025-01-30 15:40:02 CET

We are frequently asked how to help sponsor Alpine Linux. Now you can:
https://alpinelinux.org/posts/2025-01-30-alpine-linux-joins-open-collective.html
https://opencollective.com/alpinelinux
#AlpineLinux

2025-01-08 18:08:57 CET

Alpine 3.18.11, 3.19.6, 3.20.5 and 3.21.2 have been released to restore prematurely removed root certificates.
https://www.alpinelinux.org/posts/Alpine-3.18.11-3.19.6-3.20.5-3.21.2-released.html
#AlpineLinux

2025-01-06 20:14:11 CET

Alpine 3.18.10, 3.19.5 and 3.20.4 have been released as well, which includes a fix for OpenSSL CVE-2024-9143.
https://www.alpinelinux.org/posts/Alpine-3.18.10-3.19.5-3.20.4-released.html
#AlpineLinux

2025-01-06 20:13:06 CET

Alpine Linux 3.21.1 has been released. This includes U-Boot tarballs for riscv64 and StarFive VisionFive2 boards.
https://www.alpinelinux.org/posts/Alpine-3.21.1-released.html
#AlpineLinux

2024-12-26 22:50:04 CET

- reply

The VM will be migrated soon to a new physical host. Gitlab should remain available while this is happening.

2024-12-26 22:36:58 CET

- reply

Gitlab is back again!
There apparently was some kind of issue with the physical host. Linode automatically detected it and the VM has been rebooted.

2024-12-26 22:28:10 CET

https://gitlab.alpinelinux.org is currently unavailable.
We received a notification from Linode they are performing emergency maintenance.
We'll post more information once we know more.

2024-12-10 07:43:47 CET

- reply

Cloud images are now available as well for v3.21:
https://alpinelinux.org/cloud/
Thanks to Tomalok for providing these!
#AlpineLinux

2024-12-06 07:20:32 CET

- reply

All packages should be available now on https://pkgs.alpinelinux.org If you are missing anything, please let us know.

2024-12-05 22:24:34 CET

- reply

3.21 is already available, but not everything has been imported yet.
Since this is the first time we have a new release with the new apkbrowser and we have a new arch, I don't know when it will be finished, but everything should be there by tomorrow.

2024-12-05 15:02:02 CET

We are happy to announce the release of Alpine Linux 3.21. This is the first stable release that contains loongarch64.
This release also comes with Linux kernel version 6.12
See https://www.alpinelinux.org/posts/Alpine-3.21.0-released.html for the release post.
A special appreciation for all the numerous contributors who helped getting this release out and fixing all the build issues.
#AlpineLinux

2024-11-29 22:10:40 CET

Fresh off the press: The builders finished building 3.21 and 3.21-rc1 has been tagged.
Please help testing it and report any issue on https://gitlab.alpinelinux.org/alpine/aports/-/issues
You can find the downloads at https://cdn.alpinelinux.org/v3.21/releases/
We appreciate all the help we received from the community in fixing the tons of build issues we experienced with 3.21. Without that we would still be struggling getting everything built.
#AlpineLinux

2024-11-18 22:44:49 CET

- reply

Userspace was completely frozen, so anything you setup to reboot the server would probably not work anyway
I did enable earlyoom to try to catch this in an earlier stage, and with proper OOB access, we can restart the server at will when it happens again.
Restarting the server automatically just before a long build would finish would be quite wasteful as well.

2024-11-18 22:36:39 CET

- reply

We also now received OOB access, which should make it easier to restart the server if necessary without having to wait for someone on-site.

2024-11-18 20:15:13 CET

- reply

The server has been rebooted and the builders are active again.
To prevent a similar issue from happening again right away, we will enable the builders in a staggered way to prevent to many large builds happening at the same time.

2024-11-17 20:18:46 CET

Heads up: the aarch64 server that hosts all the arm builders is frozen up and the repositories are not receiving updates at the moment.
We need someone on site to restart the server, which we expect to happen tomorrow morning (18-11) end of day.
https://gitlab.alpinelinux.org/alpine/infra/infra/-/issues/10832/

2024-10-28 20:59:32 CET

- reply

As promised, here is a post-mortem of what happened:
https://www.alpinelinux.org/posts/2024-10-28-postmortem-edge-mirror.html
#AlpineLinux

2024-10-26 16:25:58 CEST

- reply

All repositories have been restored again on our tier 1 infrastructure since 5.45 UTC this morning, third-party mirrors may still be catching up.
We have hardened our build scripts against to what we believe was the issue.
A more detailed write-up will follow.

2024-10-25 23:22:51 CEST

- reply

https://gitlab.alpinelinux.org/alpine/infra/infra/-/issues/10831

2024-10-25 22:51:13 CEST

- reply

We understand what happened (bad rsync invocation), but do not have a root cause yet, we are still investigating.
In the mean time, we are uploading the packages to the mirrors again, so we expect them to be available in a couple of hours.

2024-10-25 21:18:34 CEST

We've learned that the packages for most architectures for the edge branch are missing on our mirrors. We are investigating the issue and give an update once we know more.
#AlpineLinux

2024-10-15 18:21:51 CEST

The 3.21 builders have been bootstrapped, which means Alpine Linux 3.21 is officially baking.
This means the build toolchain has been frozen and help fixing build issues is appreciated.
#AlpineLinux

2024-09-06 14:43:01 CEST

Alpine 3.17.10, 3.18.9, 3.19.4, 3.20.3 released
Those releases contain various security fixes including a fix for OpenSSL CVE-2024-6119.
https://security.alpinelinux.org/vuln/CVE-2024-6119
See https://alpinelinux.org/posts/Alpine-3.17.10-3.18.9-3.19.4-3.20.3-released.html
#AlpineLinux