The attempted exploitation of CVE-2026-97229 on gitlab.alpinelinux.org may have been successful, leading to a complete rebuild of GitLab.
Claims
The attempted exploitation of CVE-2026-97229 on gitlab.alpinelinux.org may have been successful, leading to a complete rebuild of GitLab.
Parent: CybersecurityEntity: GitLab security incidentImpact: negativeDate: Oct 29, 2026Target: The security of gitlab.alpinelinux.org
The security incident at gitlab.alpinelinux.org did not affect Alpine packages and releases.
Parent: Software DevelopmentEntity: Alpine LinuxImpact: neutralDate: Oct 29, 2026Target: The impact of the security incident on Alpine Linux
Source posts
We have published a report on a security incident on gitlab.alpinelinux.org. An attacker tried to exploit CVE-2026-97229. We found no evidence it succeeded but can't rule it out, so we rebuilt
GitLab from scratch.
Alpine packages and releases were not affected, and no signing keys were exposed.
All GitLab passwords have been reset. If you reused yours elsewhere, change it there.
https://alpinelinux.org/posts/GitLab-security-incident-CVE-2026-97229.html
#AlpineLinux #security
57 boosts · 60 favs · 2 replies · Oct 29, 2026
#alpinelinux#security
GitLab Security Incident: Attempted Exploitation of CVE-2026-97229
https://alpinelinux.org/posts/GitLab-security-incident-CVE-2026-97229.html
https://news.ycombinator.com/item?id=50282544
0 boosts · 0 favs · 0 replies · Oct 29, 2026