# Alpine rebuilds GitLab after attempted exploit exposed Ruby patch gap

_Published Wednesday, October 28, 2026 at 10:18 PM EDT · Security · Latest · Tier 2 — Notable_

Alpine Linux completed rebuilding its GitLab instance on October 28 and reset all passwords after attempted exploitation of CVE-2026-97229. Alpine said it found no evidence of successful code execution but could not rule it out because some logs were missing and outbound connections were not recorded.

An October 22 GitLab upgrade had left its custom container vulnerable because the fix required a separate Ruby patch. Alpine's replacement container published October 27 includes Ruby 3.3.13. Checks found no tampering in verified packages and releases; Alpine is extending those checks through October 27. Public access remains closed during testing.

## Sources

- [alpinelinux.org](https://alpinelinux.org/posts/GitLab-security-incident-CVE-2026-97229.html)

---
Canonical: https://techandbusiness.org/newswire/THJHCE4YgIUYR80b9B8y64
Published: 2026-10-29T02:18:48.817Z
Story chronology: 2026-10-28T12:00:00.000Z
Retrieved: 2026-10-29T05:40:01.853Z
Publisher: Tech & Business (techandbusiness.org)