The Alpine Linux project is pleased to announce the immediate availability
of new stable releases:

- [3.21.10](https://git.alpinelinux.org/aports/log/?h=v3.21.10)
- [3.22.8](https://git.alpinelinux.org/aports/log/?h=v3.22.8)
- [3.23.8](https://git.alpinelinux.org/aports/log/?h=v3.23.8)
- [3.24.4](https://git.alpinelinux.org/aports/log/?h=v3.24.4)

These releases include security fixes across core components.

The full list of changes can be found in the git log.

## openssh

Fixes a password authentication bypass in `openssh-server`. If you run `sshd`,
update and restart it; if you cannot update, set `PasswordAuthentication no`.
See the security advisory[1].

[1]: https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/

## apk-tools

A security fix in apk-tools 3.0.9 and 2.14.13 to prevent crashing on certain
malformed data.

- https://gitlab.alpinelinux.org/alpine/apk-tools/-/commit/8f34a5a9ad2e84e0f2eff96e5cc93befdbf7172f
- https://gitlab.alpinelinux.org/alpine/apk-tools/-/commit/1972e1906bc05e6f474cebf1e5436375552f3582