Alpine 3.21.10, 3.22.8, 3.23.8 and 3.24.4 released

Key points

The Alpine Linux project published four stable point releases on 2026-11-05: 3.21.10, 3.22.8, 3.23.8 and 3.24.4. They carry security fixes for core components, including openssh and apk-tools.

Security fixes

• openssh-server: fixes a flaw that let an attacker get past password authentication; a separate security advisory gives the details.
• apk-tools: versions 3.0.9 and 2.14.13 stop the package manager from crashing when it reads certain malformed data. The fix is in two commits on the project's GitLab.
• The git log lists the complete set of changes in these releases.

What to do

• Systems running sshd should be updated, and the SSH daemon restarted so the fixed version is in use.
• If the update cannot be applied yet, setting PasswordAuthentication no in the SSH server configuration is the stated workaround.

Summary by DistroNews, based on the original post.