Alpine Linux says an attacker tried to exploit GitLab CVE-2026-97229 (CVSS 10.0) on Oct 20 and 21, a week after GitLab's Oct 12 fix. Alpine had upgraded to 19.3.4 by mistake, not fixed 19.3.5, and 19.3.6 still lacked the fix, a patch to GitLab's bundled Ruby. With some logs gone it cannot rule out success, so it rebuilt the instance; it found no tampering with packages or releases.
https://alpinelinux.org/posts/GitLab-security-incident-CVE-2026-97229.html