Alpine Linux

Alpine Linux has published a security advisory detailing a password authentication bypass vulnerability in OpenSSH-server. The warning concerns users of the lightweight distribution widely used in servers and containers. Administrators are being urged to review the advisory and update their systems, with the news drawing significant attention from security-minded developers discussing its implications.

GitLab has disclosed a security incident involving attempted exploitation of the vulnerability tracked as CVE-2026-97229. Alpine Linux, which operates a GitLab instance for its development infrastructure, published a notice about the incident. The disclosure is drawing attention from developers and security teams reviewing whether their own GitLab deployments were targeted.

A new operating system called AlpineBSD has been announced, combining the NetBSD kernel with the Alpine Linux userland. Its developers are promoting it as a free and open source OS built without AI assistance, a stance that sets it apart in current software discussions. Reaction so far centres on the unusual pairing of BSD and Linux components and on the explicit no-AI positioning.

Alpine Linux has rebuilt its GitLab infrastructure following an attempted remote code execution attack on its systems. The lightweight Linux distribution said the incident prompted a full rebuild of the GitLab instance as a precaution, with maintainers reviewing the environment for signs of compromise before restoring service. The attempted attack has drawn attention within the open source community to security practices around developer infrastructure.

A new free and open-source operating system called AlpineBSD has been announced. It combines the NetBSD kernel with the Alpine Linux userland, and its developers bill it as an AI-free FOSS project, positioning it explicitly against the trend of adding artificial intelligence features to operating systems. The announcement is circulating among Linux and BSD community members, who are weighing the technical merits of mixing a BSD kernel with Alpine's lightweight, musl-based userland tools.

Alpine Linux has published an incident report detailing an attacker who spent two days probing its GitLab server with crafted CI configurations, crashing workers eight times and partially progressing an exploit four times. Alpine responded by rebuilding the server and resetting every password. Security professionals are sharing the report as a notably transparent and useful write-up of a supply-chain-adjacent attack attempt.

AlpineBSD has been announced as a new free and open source operating system built without AI-generated code. The project positions itself explicitly as 'AI-free', a stance that stands out as many software projects increasingly adopt AI coding tools. Details about its relationship to Alpine Linux or the BSD family remain limited, but the announcement is drawing attention for its no-AI promise.