@cyberseckyle@infosec.exchange
2026-10-29 13:55 UTC
Alpine Linux says attackers tried CVE-2026-97229 against its GitLab server. No successful code execution was found, but it couldn't be ruled out; Alpine rebuilt the instance.
The operational lesson: its custom image was still vulnerable after a GitLab upgrade because the bundled Ruby lacked the fix. If you run GitLab from source or a custom image, check the Ruby version as well as GitLab's release.
https://alpinelinux.org/posts/GitLab-security-incident-CVE-2026-97229.html
Replies (0)
No replies.