Alpine rebuilds GitLab after attempted exploit exposed Ruby patch gap

Alpine Linux completed rebuilding its GitLab instance on October 28 and reset all passwords after attempted exploitation of CVE-2026-97229. Alpine said it found no evidence of successful code execution but could not rule it out because some logs were missing and outbound connections were not recorded. An October 22 GitLab upgrade had left its custom container vulnerable because the fix required a separate Ruby patch. Alpine's replacement container published October 27 includes Ruby 3.3.13. Checks found no tampering in verified packages and releases; Alpine is extending those checks through October 27. Public access remains closed during testing.