Alpine Linux rebuilt its GitLab server after a close call
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Alpine Linux rebuilt its GitLab server from scratch after an attacker tried the CVSS 10.0 remote-code-execution flaw CVE-2026-97229 on Oct. 20–21. Alpine had upgraded GitLab, but its image used standard Ruby without the bundled regex-engine patch, so the bug stayed exploitable. Eight worker crashes followed, four partway through the exploit. Missing logs meant code execution could not be ruled out. Builders should verify that fixes reach the running runtime and keep longer logs. ZDNET's CISA listing and Shadowserver counts were not verified.