CriticalCVE
Alpine Linux rebuilds GitLab after attempted RCE attack
BleepingComputer·Source published ·1 min read
What happened?
Hackers attempted to exploit a critical GitLab vulnerability in Alpine Linux's development infrastructure on October 20-21, prompting the open-source project to rebuild its GitLab server and reset all passwords over concerns of a possible compromise. [...]
Key details
- GitLab CI/CD regex compiler Onigmo has integer overflow allowing remote code execution.
- Alpine advises users to reset passwords and pull patched GitLab image.
- GitLab 19.3.6 with Ruby 3.3.13 addresses the integer overflow flaw.
Affected
- Alpine Linux GitLab instance hosting development repositories and CI jobs.
What to look for
- Eight GitLab worker crashes from malicious CI configurations targeting the flaw.
Summarised by SecOraLens from BleepingComputer. Always read the original source before acting. How SecOraLens verifies advisories.