Fixes for PHP CVE-2026-109618 and CVE-2026-109619 have either landed or are on their way.
Fixed versions:
- 8.5.12
- 8.4.27
- 8.3.36
- 8.2.35
Check https://build.alpinelinux.org for the current status of each builder, and https://pkgs.alpinelinux.org to see what is present in each repository.
https://pkgs.alpinelinux.org/packages?name=php%253F%253F&branch=v3.24 for example shows the current version of PHP on the v3.24 branch.
Due to high load on gitlab.alpinelinux.org and the urgent security fixes we have to provide, we sadly had to decide to block most access and only allow access to certain IP addresses..
Linode is migrating the VM to another physical host and is unavailable during the process.
Gitlab is back
gitlab.alpinelinux.org is unavailable at the moment. Linode reported the physical host is having issues and they need to perform emergency maintenance.
It took a long time, but our #riscv64 builder managed to finish building the community packages. At the worst, it had a backlog of more than 800 packages, but it managed to churn along the last couple of weeks.
We had it running on a HiFive P550 for a while. Even though it had faster cores, we had to move it back to the MilkV Pionieer.
We're trying some other riscv64 systems as well, to see if they serve as better builders.
The issue has been fixed, gitlab should be available again.
Let us know if you still are facing issues.
https://gitlab.alpinelinux.org is having issues after performing an upgrade. Working on restoring it.
The Alpine Linux project is pleased to announce the immediate availability of new stable releases:
- 3.22.5
- 3.23.5
These releases addresses the OpenSSL Security Advisory [9th June 2026] (https://openssl-library.org/news/secadv/20260609.txt), with a number of CVEs.
See: https://www.alpinelinux.org/posts/Alpine-3.22.5-3.23.5-released.html
The docker images for these releases will follow.
We are pleased to announce the release of Alpine Linux 3.24.0, the first release in the v3.24 stable series.
https://alpinelinux.org/posts/Alpine-3.24.0-released.html
The installer (setup-alpine) now supports limine as bootloader, and includes ipv6 support
It took some time and effort, but the Alpine Linux riscv64 3.24 builder finally managed to churn through all the packages.
This means Alpine Linux 3.24 is imminent. Expect the first RC soon.
Alpine Linux and PostmarketOS conference sponsoring:
https://opencollective.com/alpinelinux/updates/alpine-linux-and-postmarketos-conference-sponsoring
2 new vulnerabilities similar to copyfail:
- CVE-2026-31431 (Dirty Frag)
- CVE-2026-43284
https://github.com/V4bel/dirtyfrag
We're waiting for a release containing the last one before pushing new kernels to aports.
https://github.com/V4bel/dirtyfrag#cleanup mentions a mitigation in the meantime.
The suspension has been lifted, the servers are online again.
All our systems hosted at Linode are suspended at the moment due to some billing issue, including gitlab. We are working with them to get it resolved.
Releases are still pending, but our repositories all received upgraded kernels to address copy.fail (CVE-2026-31431).
So make sure you upgrade to the latest available kernels.
edge: >= linux-lts-6.18.22
3.23: >= linux-lts-6.18.22
3.22: >= linux-lts-6.12.85
3.21: >= linux-lts-6.12.85
3.20: >= linux-lts-6.6.137
3.19: >= linux-lts-6.6.137
3.18: >= linux-lts-6.1.170
3.17: >= linux-lts-5.15.204
The Alpine Linux project is pleased to announce the immediate availability of new stable releases:
3.20.9
3.21.6
3.22.3
3.23.3
These updates include security fixes for OpenSSL addressing the January 27, 2026 advisory: https://openssl-library.org/news/secadv/20260127.txt
https://alpinelinux.org/posts/Alpine-3.20.9-3.21.6-3.22.3-3.23.3-released.html
Alpine Linux 3.23.0 Released 🎉
We are pleased to announce the release of Alpine Linux 3.23.0, the first release in the v3.23 stable series.
Which includes
- apk-tools version 3
- linux-stable replacing linux-edge
- Any many other changes
Thanks to all the contributors helping to get this released!
We also want to thank the new sponsors that stepped in after Equinix Metal sunsetted:
- Cherry Servers
- Netmountains
- Osso B.V.
- CloudOn
- HorizonIQ
We're happy to announce that Alpine 3.19.9, 3.20.8, 3.21.5 and 3.22.2 are released.
These updates include security fixes for OpenSSL addressing the September 30, 2025 advisory (CVE-2025-9230, CVE-2025-9231, CVE-2025-9232).
https://alpinelinux.org/posts/Alpine-3.19.9-3.20.8-3.21.5-3.22.2-released.html
We'd like to welcome @fossdd and Mio as new Alpine Linux developers.
We really appreciate all the work they and the rest of the community have done.