Alpine Linux rebuilds its GitLab after an attacker exploited the GitLab flaw its own Ruby left open

On October 28, 2026, Alpine Linux revealed that an attacker had tried to exploit CVE-2026-97229 (CVSS 10.0) against its own GitLab server, a week after GitLab’s fix. The lesson goes beyond Alpine: for a GitLab install compiled with a homegrown Ruby, upgrading GitLab is not enough — you must upgrade Ruby too.