Hacker News new | past | comments | ask | show | jobs | submit

GitLab Security Incident: Attempted Exploitation of CVE-2026-97229

https://alpinelinux.org/posts/GitLab-security-incident-CVE-2026-97229.html
loading story #50282759
loading story #50283089
> If you use our alpinelinux/gitlab container image, pull alpinelinux/gitlab:19.3.6 again. The image published on October 27 contains Ruby 3.3.13. Any 19.3.6 image you pulled before October 27, and all older tags, are vulnerable.

shouldn't they tag a new version instead of re-releasing a fixed 19.3.6, if earlier 19.3.6 are vulnerable?

loading story #50284835
loading story #50283324
loading story #50285496
loading story #50285171
loading story #50283939
loading story #50283619
loading story #50285581
loading story #50284852
loading story #50289708
loading story #50284839
loading story #50284526
loading story #50290310
loading story #50288228
loading story #50288403
loading story #50284922
loading story #50282632
loading story #50282627
loading story #50285058
loading story #50285114
loading story #50283248