Alpine Linux releases 3.22.5 and 3.23.5 with OpenSSL and Xen security fixes
Key Takeaway
Alpine Linux has released updates for the 3.22 and 3.23 stable branches to address multiple security vulnerabilities in OpenSSL and Xen.
Summary
The Alpine Linux project has released stable updates 3.22.5 and 3.23.5. These updates primarily focus on security patches for OpenSSL and Xen, addressing several CVEs and XSA advisories. Users running these versions are encouraged to update to mitigate identified risks.
Security updates in Alpine 3.22.5 and 3.23.5
- Includes security fixes for OpenSSL addressing the June 9, 2026 advisory, covering 15 specific CVEs (including CVE-2026-34180, CVE-2026-45445, and CVE-2026-9076).
- Includes security fixes for Xen addressing advisories XSA-491 through XSA-494.
- Addresses multiple CVEs related to Xen, such as CVE-2026-42487 and CVE-2026-42489.
Why it matters
These updates are critical for users relying on Alpine Linux for secure, lightweight environments, particularly those utilizing OpenSSL for encryption or Xen for virtualization.
Original reference: alpinelinux.org →