Release Notes for Alpine 3.15.0

aports

QtWebKit was removed due to lack of upstream support

qt5-qtwebkit, kdewebkit, wkhtmltopdf, and py3-pdfkit have been removed due to known vulnerabilities and lack of upstream support for qtwebkit. Other programs have been adjusted to use qt5-qtwebengine where appropriate. The most direct replacement for wkhtmltopdf is weasyprint, which is available in the Alpine Linux community repository. puppeteer and pandoc are also options, depending on your needs. See #12888 for more information.

radvd no longer enables ipv6 forwarding

The radvd init script no longer enables ipv6 forwarding. To enable ipv6 forwarding (necessary for most networks), add net.ipv6.conf.all.forwarding=1 to /etc/sysctl.conf or to a file in /etc/sysctl.d.

OpenSSL 3.0

openssl has been upgraded to 3.0. In addition to the changes at https://wiki.openssl.org/index.php/OpenSSL_3.0, note that this release effectively disables TLS 1.0 and TLS 1.1 by default: https://github.com/openssl/openssl/commit/aba03ae571ea677fc484daef00a21ca8f7e82708.

New package signing keys

New signing keys have been generated for v3.15 ongoing. The key size has been increased from 2048 bits to 4096 bits. Make sure you have alpine-keys-2.4-r0 or later before upgrading to 3.15 (or downgrading from edge).

Ruby 3.0

Ruby has been upgraded to version 3.0.

LLVM12 added

LLVM12 is now available.

KDE

KDE Plasma has been upgraded to version 5.23, and KDE Applications have been upgraded to 21.08. Plasma Mobile Gear has been upgraded to 21.10.

MIPS64 discontinued

The build hardware we use for building the packages is broken and the architecture is EOL, so there is no new hardware available anymore. As a consequence, there will be no v3.15 release for mips64, and existing releases can no longer receive security updates, so continued use of this architecture is not recommended.