Alpine 3.21.10, 3.22.8, 3.23.8 and 3.24.4 released

The Alpine Linux project is pleased to announce the immediate availability of new stable releases:

• 3.21.10
• 3.22.8
• 3.23.8
• 3.24.4

These releases include security fixes across core components.

The full list of changes can be found in the git log.

openssh

Fixes a password authentication bypass in openssh-server. If you run sshd, update and restart it; if you cannot update, set PasswordAuthentication no. See the security advisory.

apk-tools

A security fix in apk-tools 3.0.9 and 2.14.13 to prevent crashing on certain malformed data.

• https://gitlab.alpinelinux.org/alpine/apk-tools/-/commit/8f34a5a9ad2e84e0f2eff96e5cc93befdbf7172f
• https://gitlab.alpinelinux.org/alpine/apk-tools/-/commit/1972e1906bc05e6f474cebf1e5436375552f3582