Alpine Linux reopens rebuilt GitLab server after attempted exploit
The new server runs patched Ruby, but missing logs leave open whether the attacker executed code.
TLDR
Alpine Linux reopened its rebuilt GitLab server on Oct. 29 with patched Ruby after an attacker targeted a maximum-severity flaw. Crafted CI configurations crashed workers eight times. Alpine found no evidence of server-side code execution or tampering in the packages and releases it checked, but missing logs mean it cannot rule out code execution. Passwords were reset, as was two-factor authentication for all accounts; GitLab password sign-ins require a new password.
Combined views
7.6K
8 Sources, first seen ago


