Notices by Alpine Linux :alpine: (alpinelinux@fosstodon.org)

Heads up: the aarch64 server that hosts all the arm builders is frozen up and the repositories are not receiving updates at the moment.

We need someone on site to restart the server, which we expect to happen tomorrow (18-11) end of day.

https://gitlab.alpinelinux.org/alpine/infra/infra/-/issues/10832/

As promised, here is a post-mortem of what happened:

https://www.alpinelinux.org/posts/2024-10-28-postmortem-edge-mirror.html

#AlpineLinux

All repositories have been restored again on our tier 1 infrastructure since 5.45 UTC this morning, third-party mirrors may still be catching up.

We have hardened our build scripts against to what we believe was the issue.

A more detailed write-up will follow.

We understand what happened (bad rsync invocation), but do not have a root cause yet, we are still investigating.

In the mean time, we are uploading the packages to the mirrors again, so we expect them to be available in a couple of hours.

We've learned that the packages for most architectures for the edge branch are missing on our mirrors. We are investigating the issue and give an update once we know more.

#AlpineLinux

The 3.21 builders have been bootstrapped, which means Alpine Linux 3.21 is officially baking.

This means the build toolchain has been frozen and help fixing build issues is appreciated.

#AlpineLinux

Alpine 3.17.10, 3.18.9, 3.19.4, 3.20.3 released

Those releases contain various security fixes including a fix for OpenSSL CVE-2024-6119.

https://security.alpinelinux.org/vuln/CVE-2024-6119

See https://alpinelinux.org/posts/Alpine-3.17.10-3.18.9-3.19.4-3.20.3-released.html

#AlpineLinux

⚠ Restart required for sshd after upgrading to 9.8_p1 on Alpine Linux Edge. Failing to restart will prevent sshd from accepting new connections.

https://alpinelinux.org/posts/2024-07-02-openssh-upgrade-edge.html

#AlpineLinux

Also released: Alpine Linux 3.17.8, 3.18.7 and 3.19.2.

Those releases contains various security fixes including fixes for:

OpenSSL

- CVE-2024-2511
- CVE-2024-4603

busybox

- CVE-2023-42363
- CVE-2023-42364
- CVE-2023-42365
- CVE-2023-42366

See: https://alpinelinux.org/posts/Alpine-3.17.8-3.18.7-3.19.2-released.html

#AlpineLinux

We are pleased to announce the release of Alpine Linux 3.20.1. This release includes various bug fixes and security updates, including security fixes for:

OpenSSL

- CVE-2024-4741

busybox

- CVE-2023-42364
- CVE-2023-42365

See: https://alpinelinux.org/posts/Alpine-3.20.1-released.html

#AlpineLinux

We are pleased to announce the release of Alpine Linux 3.20.0, the first in the v3.20 stable series.

This is the first stable release that includes Risc-V 64 support thanks to Milk-V.

Upgrades includes among others:

- Rust 1.78
- Python 3.12
- KDE 6

https://www.alpinelinux.org/posts/Alpine-3.20.0-released.html

Thanks to all the contributors who worked hard on getting this release out!

#AlpineLinux

The x86_64 3.20 builder finished building community today (after some blockers were fixed / wirked around). Only riscv64 is left.

The first rc is imminent. Please test the packages you care about so that issues can be fixed.

#alpine #alpinelinux

☕

@chimera_linux @rnd Yes, we're indeed not affected. Even the sources we used were not affected.

Alpine Linux is not affected by CVE-2024-3094 (backdoor in upstream xz/liblzma leading to ssh server compromise).

Update on the grub situation on Alpine Linux: https://gitlab.alpinelinux.org/alpine/aports/-/merge_requests/60910 has landed, which removes the problematic part of the configuration that resulted in grub crashing / restarting.

Thanks to the heroic effort of omni and celeste, rust 1.76 landed today in #alpine after being stuck on 1.72 for quite some time.

https://gitlab.alpinelinux.org/alpine/aports/-/commits/master/main/rust/APKBUILD

Alpine 3.19.1 released.

This release includes various bug fixes and security updates, including security fixes for OpenSSL:

- CVE-2023-6129
- CVE-2023-6237
- CVE-2024-0727

https://www.alpinelinux.org/posts/Alpine-3.19.1-released.html

#AlpineLinux

Alpine Linux 3.19.0 Released

We are pleased to announce the release of Alpine Linux 3.19.0, the first in the v3.19 stable series.

Most notably it comes with Linux 6.6 as the new LTS kernel. For other changes, see: https://alpinelinux.org/posts/Alpine-3.19.0-released.html

#AlpineLinux

Alpine Linux 3.15.11, 3.16.8, 3.17.6 and 3.18.5 have been released.

They included openssl fixes for:

- CVE-2023-5678
- CVE-2023-5363

https://alpinelinux.org/posts/Alpine-3.15.11-3.16.8-3.17.6-3.18.5-released.html

#AlpineLinux