October 30, 2026
- Alpine Linux caught an exploitation attempt against its own GitLab using CVE-2026-97229 (CVSS 10.0) a week after the fix shipped, and found no evidence it succeeded. The sting: upgrading to GitLab 19.3.6 on 22 October didn't close it, because the fix lives in a Ruby patch GitLab applies only in its official packages — Alpine's image used stock Ruby (Alpine Linux, The Hacker News) (earlier coverage). · Supply Chain & Build Pipelines