Alpine 3.19.9, 3.20.8, 3.21.5, and 3.22.2 released

Published by

Alpine Linux has announced the release of several new stable versions: 3.19.9, 3.20.8, 3.21.5, and 3.22.2. These updates include crucial security fixes for OpenSSL, specifically addressing vulnerabilities identified as CVE-2025-9230, CVE-2025-9231, and CVE-2025-9232. These vulnerabilities pose risks to applications attempting to decrypt CMS messages that are encrypted with password-based encryption. Exploitation could lead to denial of service or allow attackers to execute malicious code.

Alpine Linux is known for its lightweight and secure environment, appealing primarily to advanced users who prioritize simplicity and efficiency. Built using musl libc and BusyBox, Alpine requires minimal storage—only 8 MB for container use and 130 MB for a basic installation. This makes it an ideal choice for projects needing a compact yet powerful Linux operating system.

The distribution features its own package manager, apk, and employs the OpenRC init system to streamline user experience. Users can customize their installations by selecting from binary packages that are organized into manageable components. Security is a core aspect of Alpine's design, with all userland binaries compiled as Position Independent Executables (PIE) and equipped with stack smashing protection, enhancing the defense against vulnerabilities.

The recent updates specifically address the aforementioned OpenSSL vulnerabilities, which were highlighted in an advisory dated September 30, 2025. The vulnerabilities could lead to application crashes or memory corruption, but their impact is somewhat mitigated by the infrequent use of password-based encryption in CMS messaging. As per Alpine Linux's security policy, these vulnerabilities have been classified with moderate severity.

In summary, the latest releases of Alpine Linux not only reinforce the platform's commitment to security and efficiency but also ensure users can operate in a protected environment. The community continues to prioritize updates that enhance overall system integrity and user confidence.

As the Linux landscape evolves, Alpine Linux remains dedicated to improving its offerings, ensuring that users have access to a secure, efficient, and customizable operating system well-suited for contemporary technological demands. Future developments may include further enhancements to security protocols, performance optimizations, and user experience improvements, continuing the trend of Alpine as a viable choice for developers and system administrators alike

Alpine 3.19.9, 3.20.8, 3.21.5, and 3.22.2 released

Alpine Linux has released new stable versions—3.19.9, 3.20.8, 3.21.5, and 3.22.2—which include security fixes for OpenSSL addressing a vulnerability (CVE-2025-9230, CVE-2025-9231, CVE-2025-9232). This issue affects applications trying to decrypt CMS messages encrypted using password-based encryption, potentially leading to denial of service or execution of attacker-supplied code.

Alpine 3.19.9, 3.20.8, 3.21.5, and 3.22.2 released @ Linux Compatible