Notices by Alpine Linux :alpine: (alpinelinux@fosstodon.org), page 2

Alpine 3.17.10, 3.18.9, 3.19.4, 3.20.3 released

Those releases contain various security fixes including a fix for OpenSSL CVE-2024-6119.

https://security.alpinelinux.org/vuln/CVE-2024-6119

See https://alpinelinux.org/posts/Alpine-3.17.10-3.18.9-3.19.4-3.20.3-released.html

#AlpineLinux

⚠ Restart required for sshd after upgrading to 9.8_p1 on Alpine Linux Edge. Failing to restart will prevent sshd from accepting new connections.

https://alpinelinux.org/posts/2024-07-02-openssh-upgrade-edge.html

#AlpineLinux

Also released: Alpine Linux 3.17.8, 3.18.7 and 3.19.2.

Those releases contains various security fixes including fixes for:

OpenSSL

- CVE-2024-2511
- CVE-2024-4603

busybox

- CVE-2023-42363
- CVE-2023-42364
- CVE-2023-42365
- CVE-2023-42366

See: https://alpinelinux.org/posts/Alpine-3.17.8-3.18.7-3.19.2-released.html

#AlpineLinux

We are pleased to announce the release of Alpine Linux 3.20.1. This release includes various bug fixes and security updates, including security fixes for:

OpenSSL

- CVE-2024-4741

busybox

- CVE-2023-42364
- CVE-2023-42365

See: https://alpinelinux.org/posts/Alpine-3.20.1-released.html

#AlpineLinux

We are pleased to announce the release of Alpine Linux 3.20.0, the first in the v3.20 stable series.

This is the first stable release that includes Risc-V 64 support thanks to Milk-V.

Upgrades includes among others:

- Rust 1.78
- Python 3.12
- KDE 6

https://www.alpinelinux.org/posts/Alpine-3.20.0-released.html

Thanks to all the contributors who worked hard on getting this release out!

#AlpineLinux

The x86_64 3.20 builder finished building community today (after some blockers were fixed / wirked around). Only riscv64 is left.

The first rc is imminent. Please test the packages you care about so that issues can be fixed.

#alpine #alpinelinux

☕

@chimera_linux @rnd Yes, we're indeed not affected. Even the sources we used were not affected.

Alpine Linux is not affected by CVE-2024-3094 (backdoor in upstream xz/liblzma leading to ssh server compromise).

Update on the grub situation on Alpine Linux: https://gitlab.alpinelinux.org/alpine/aports/-/merge_requests/60910 has landed, which removes the problematic part of the configuration that resulted in grub crashing / restarting.

Thanks to the heroic effort of omni and celeste, rust 1.76 landed today in #alpine after being stuck on 1.72 for quite some time.

https://gitlab.alpinelinux.org/alpine/aports/-/commits/master/main/rust/APKBUILD

Alpine 3.19.1 released.

This release includes various bug fixes and security updates, including security fixes for OpenSSL:

- CVE-2023-6129
- CVE-2023-6237
- CVE-2024-0727

https://www.alpinelinux.org/posts/Alpine-3.19.1-released.html

#AlpineLinux

Alpine Linux 3.19.0 Released

We are pleased to announce the release of Alpine Linux 3.19.0, the first in the v3.19 stable series.

Most notably it comes with Linux 6.6 as the new LTS kernel. For other changes, see: https://alpinelinux.org/posts/Alpine-3.19.0-released.html

#AlpineLinux

Alpine Linux 3.15.11, 3.16.8, 3.17.6 and 3.18.5 have been released.

They included openssl fixes for:

- CVE-2023-5678
- CVE-2023-5363

https://alpinelinux.org/posts/Alpine-3.15.11-3.16.8-3.17.6-3.18.5-released.html

#AlpineLinux

All builders have completed building the packages for main and community for Alpine 3.19.

Thanks everyone involved with helping fixing any build issues.

v3.19.0_rc1 has been released. Please test and report any issues on https://gitlab.alpinelinux.org/alpine/aports/-/issues

We are pleased to announce the release of Alpine Linux 3.18.4, a maintenance release of the 3.18 series. This release includes various bug fixes and security updates.

See: https://www.alpinelinux.org/posts/Alpine-3.18.4-released.html for the full release notes.

#AlpineLinux

Alpine 3.15.10, 3.16.7, 3.17.5 and 3.18.3 released.

It contains fixes for openssl related CVEs:

- CVE-2023-2975
- CVE-2023-3446
- CVE-2023-3817

See: https://alpinelinux.org/posts/Alpine-3.15.10-3.16.7-3.17.5-3.18.3-released.html

#Alpine #AlpineLinux #cve #openssl

The #zenbleed vulnerability (CVE-2023-20593) has been patched in edge and stable versions v3.15-v3.18 in #AlpineLinux. Make sure that the amd-ucode package is installed so that you get ucode updates. For consumer CPUs, AMD will only provide updates later this year. The latest kernel version will automatically toggle the chicken bit if the relevant ucode upgrades have not been applied.