{"id":49009,"date":"2026-10-29T19:14:38","date_gmt":"2026-10-29T10:14:38","guid":{"rendered":"https:\/\/jore2.com\/?p=49009"},"modified":"2026-10-29T19:14:38","modified_gmt":"2026-10-29T10:14:38","slug":"news-22634-gitlab-security-incident-attempted-exploitation-of-cve-2026-97229","status":"publish","type":"post","link":"https:\/\/jore2.com\/?p=49009","title":{"rendered":"\uc54c\ud30c\uc778 \ub9ac\ub205\uc2a4, GitLab \ucde8\uc57d\uc810 \uacf5\uaca9 \uc2dc\ub3c4 \ud6c4 \uc778\uc2a4\ud134\uc2a4 \uc804\uba74 \uc7ac\uad6c\ucd95"},"content":{"rendered":"<div class=\"jore2-editor-byline\">\n<p><strong>\uc815\ud558\ubbfc<\/strong><\/p>\n<\/div>\n<p>\uc54c\ud30c\uc778 \ub9ac\ub205\uc2a4 \ud504\ub85c\uc81d\ud2b8\uac00 \uc790\uccb4 GitLab \uc778\uc2a4\ud134\uc2a4\uc5d0 \ub300\ud55c \ubcf4\uc548 \uc0ac\uace0\ub97c \uacf5\uc2dd \ubc1c\ud45c\ud588\uc2b5\ub2c8\ub2e4. \uc9c0\ub09c 10\uc6d4 20\uc77c\uacfc 21\uc77c \uc774\ud2c0 \ub3d9\uc548 \uc678\ubd80 \uacf5\uaca9\uc790\uac00 CVE-2026-97229 \ucde8\uc57d\uc810\uc744 \uc545\uc6a9\ud574 \uc2dc\uc2a4\ud15c\uc5d0 \uce68\ud22c\ub97c \uc2dc\ub3c4\ud55c \uc0ac\uac74\uc785\ub2c8\ub2e4.<\/p>\n<p>\uacf5\uaca9\uc790\ub294 \uc2e0\uaddc\ub85c \uc0dd\uc131\ud55c \uacc4\uc815\uc744 \ud1b5\ud574 \ud2b9\uc218\ud558\uac8c \uc81c\uc791\ub41c CI \uc124\uc815 \ud30c\uc77c\uc744 \uc5c5\ub85c\ub4dc\ud588\uc2b5\ub2c8\ub2e4. \uc774 \uacfc\uc815\uc5d0\uc11c GitLab \uc6cc\ucee4 \ud504\ub85c\uc138\uc2a4\uac00 \ucd1d 8\ubc88 \ud06c\ub798\uc2dc\ub418\ub294 \ud604\uc0c1\uc774 \ubc1c\uc0dd\ud588\uc2b5\ub2c8\ub2e4. \ubd84\uc11d \uacb0\uacfc 4\ubc88\uc758 \ud06c\ub798\uc2dc\uc5d0\uc11c\ub294 \uacf5\uaca9\uc790\uac00 \uc775\uc2a4\ud50c\ub85c\uc787 \uc9c4\ud589 \uc911 \uc77c\ubd80 \ub2e8\uacc4\uae4c\uc9c0 \ub3c4\ub2ec\ud588\uc73c\ub098 \ub2e4\uc74c \ub2e8\uacc4\uc5d0\uc11c \uc2e4\ud328\ud588\uc2b5\ub2c8\ub2e4.<\/p>\n<p>\uc6b4\uc601\uc9c4\uc740 \uc131\uacf5\uc801\uc778 \ucf54\ub4dc \uc2e4\ud589 \ud754\uc801\uc744 \ucc3e\uc9c0 \ubabb\ud588\ub2e4\uace0 \ubc1d\ud614\uc2b5\ub2c8\ub2e4. \ud558\uc9c0\ub9cc \uc644\uc804\ud55c \uce68\ud22c\ub97c \uc785\uc99d\ud558\uac70\ub098 \ubc30\uc81c\ud560 \uc218 \uc788\ub294 \uc99d\uac70\uac00 \ub0a8\uc544 \uc788\uc9c0 \uc54a\ub2e4\ub294 \ud310\ub2e8 \ud558\uc5d0 \ud574\ub2f9 \uc778\uc2a4\ud134\uc2a4\ub97c \uc644\uc804\ud788 \uc190\uc0c1\ub41c \uac83\uc73c\ub85c \uac04\uc8fc\ud588\uc2b5\ub2c8\ub2e4. \uc774\uc5d0 \ub530\ub77c \uae30\uc874 \ub370\uc774\ud130\ub97c \ubaa8\ub450 \uc0ad\uc81c\ud558\uace0 \ubc31\uc5c5\ubcf8\uc73c\ub85c\ubd80\ud130 \uc2dc\uc2a4\ud15c\uc744 \ucc98\uc74c\ubd80\ud130 \ub2e4\uc2dc \uad6c\ucd95\ud558\ub294 \uc870\uce58\ub97c \ucde8\ud588\uc2b5\ub2c8\ub2e4.<\/p>\n<p>\uc774\ubc88 \uc0ac\uac74\uc758 \ud575\uc2ec\uc740 \ucde8\uc57d\uc810\uc758 \uad6c\uc870\uc801 \ud2b9\uc131\uc5d0 \uc788\uc2b5\ub2c8\ub2e4. CVE-2026-97229\ub294 Ruby \uc5b8\uc5b4 \ub0b4\uc7a5 \uc815\uaddc\uc2dd \uc5d4\uc9c4\uc778 Onigmo\uc758 \uc815\uc218 \uc624\ubc84\ud50c\ub85c\uc6b0 \uacb0\ud568\uc5d0\uc11c \ube44\ub86f\ub429\ub2c8\ub2e4. GitLab\uc774 10\uc6d4 12\uc77c\uc5d0 \ubc30\ud3ec\ud55c \uc218\uc815 \ubc84\uc804\uc740 \uc790\uc0ac \ud328\ud0a4\uc9c0\uc5d0 \ud3ec\ud568\ub41c Ruby\uc5d0\ub9cc \ud328\uce58\ub97c \uc801\uc6a9\ud588\uc2b5\ub2c8\ub2e4.<\/p>\n<p>\ub530\ub77c\uc11c \ud45c\uc900 Ruby\ub97c \uc0ac\uc6a9\ud558\ub294 \ucee4\uc2a4\ud140 \ube4c\ub4dc\ub098 \ud0c0\uc0ac \ucee8\ud14c\uc774\ub108 \uc774\ubbf8\uc9c0\ub294 \uc5c5\ub370\uc774\ud2b8 \ud6c4\uc5d0\ub3c4 \uc5ec\uc804\ud788 \ucde8\uc57d \uc0c1\ud0dc\uc600\uc2b5\ub2c8\ub2e4.<\/p>\n<p>\uc54c\ud30c\uc778 \ub9ac\ub205\uc2a4\ub294 \ub2f9\uc2dc 19.3.4 \ubc84\uc804\uc744 \uc0ac\uc6a9\ud558\uace0 \uc788\uc5c8\uc2b5\ub2c8\ub2e4. \uc774\ub294 10\uc6d4 12\uc77c\uc758 \uacf5\uc2dd \uc218\uc815\ud310\ubcf4\ub2e4 \uc774\uc804 \ubc84\uc804\uc774\uc5c8\uc2b5\ub2c8\ub2e4. \uc0c1\ub958 Ruby \ud504\ub85c\uc81d\ud2b8\ub294 10\uc6d4 23\uc77c\uc5d0\uc57c 3.3.13, 3.4.12, 4.0.9 \ubc84\uc804\uc5d0\uc11c \uadfc\ubcf8\uc801\uc778 \ud574\uacb0\ucc45\uc744 \ub0b4\ub193\uc558\uc2b5\ub2c8\ub2e4.<\/p>\n<p>\uacf5\uae09\ub9dd \uad00\ub9ac \uce21\uba74\uc5d0\uc11c \uc790\uccb4 \ube4c\ub4dc \ud658\uacbd\uc758 \uc704\ud5d8\uc131\uc774 \ub4dc\ub7ec\ub09c \uc148\uc785\ub2c8\ub2e4.<\/p>\n<p>\ud604\uc7ac \uc54c\ud30c\uc778 \ub9ac\ub205\uc2a4 aports \uc800\uc7a5\uc18c\uc640 \ud328\ud0a4\uc9c0, \uadf8\ub9ac\uace0 10\uc6d4 21\uc77c \ub9b4\ub9ac\uc2a4 \ubc84\uc804\uc5d0\ub294 \ubcc0\uc870 \ud754\uc801\uc774 \uc5c6\ub294 \uac83\uc73c\ub85c \ud655\uc778\ub418\uc5c8\uc2b5\ub2c8\ub2e4. \ub2e4\ub9cc \ubcf4\uc548 \uc6d0\uce59\uc5d0 \ub530\ub77c \ubaa8\ub4e0 \uc0ac\uc6a9\uc790\uc758 \ube44\ubc00\ubc88\ud638\ub294 \uac15\uc81c\ub85c \ucd08\uae30\ud654\ub418\uc5c8\uc2b5\ub2c8\ub2e4. \uc11c\ube44\uc2a4 \uc7ac\uac1c \uc2dc \ub85c\uadf8\uc778 \ud398\uc774\uc9c0\uc758 &#8216;\ube44\ubc00\ubc88\ud638 \ucc3e\uae30&#8217; \uae30\ub2a5\uc744 \uc774\uc6a9\ud574 \uc0c8 \uc554\ud638\ub97c \uc124\uc815\ud574\uc57c \ud569\ub2c8\ub2e4.<\/p>\n<p>\uc6b4\uc601\uc9c4\uc740 \ub2e4\ub978 \uc0ac\uc774\ud2b8\uc5d0\uc11c \ub3d9\uc77c\ud55c \ube44\ubc00\ubc88\ud638\ub97c \uc0ac\uc6a9\ud55c \uacbd\uc6b0 \uadf8\uacf3\uc5d0\uc11c\ub3c4 \uc989\uc2dc \ubcc0\uacbd\ud560 \uac83\uc744 \uad8c\uace0\ud588\uc2b5\ub2c8\ub2e4. \uc790\ub3d9\ud654\ub41c \ub85c\uadf8\uc778 \uc2dc\ub3c4\uac00 \uad00\uce21\ub418\uc5c8\uae30 \ub54c\ubb38\uc785\ub2c8\ub2e4. \uc9c8\ubb38\uc774\ub098 \uc6b0\ub824 \uc0ac\ud56d\uc774 \uc788\uc744 \uacbd\uc6b0 infra@alpinelinux.org \uc8fc\uc18c\ub85c \uc5f0\ub77d\ud558\uba74 \ub429\ub2c8\ub2e4.<\/p>\n<p>GitLab \uc778\uc2a4\ud134\uc2a4\ub294 \ud604\uc7ac \ub0b4\ubd80 \ud14c\uc2a4\ud2b8 \ub2e8\uacc4\ub97c \uac70\uce58\uace0 \uc788\uc73c\uba70, \uc644\ub8cc \ud6c4 \uacf5\uac1c \uc77c\uc815\uc774 \uacf5\uc9c0\ub420 \uc608\uc815\uc785\ub2c8\ub2e4.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CVE-2026-97229 \ucde8\uc57d\uc810\uc744 \ub178\ub9b0 \uacf5\uaca9 \uc2dc\ub3c4\ub85c \uc54c\ud30c\uc778 \ub9ac\ub205\uc2a4\uc758 GitLab \uc11c\ubc84\uac00 \uc77c\uc2dc\uc801\uc73c\ub85c \ub9c8\ube44\ub418\uc5c8\uc2b5\ub2c8\ub2e4. \uc6b4\uc601\uc9c4\uc740 \uce68\ud22c \uac00\ub2a5\uc131\uc744 \ubc30\uc81c\ud560 \uc218 \uc5c6\uc5b4 \ubaa8\ub4e0 \uacc4\uc815\uc758 \ube44\ubc00\ubc88\ud638\ub97c \ucd08\uae30\ud654\ud558\uace0 \uc2dc\uc2a4\ud15c\uc744 \uc0c8\ub85c \uad6c\ucd95\ud588\uc2b5\ub2c8\ub2e4.<\/p>\n","protected":false},"author":5,"featured_media":49008,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jore2_quality_policy":"people-first-v2","footnotes":""},"categories":[405],"tags":[32344,32166,21196,9789,23187,32343],"class_list":["post-49009","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-405","tag-cve-2026-97229","tag-gitlab","tag-ruby","tag-9789","tag-23187","tag-32343"],"featured_image_urls":{"full":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/10\/news-22634-gitlab-security-incident-attempted-exploitation-of-cve-2026-97229.png",1200,630,false],"thumbnail":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/10\/news-22634-gitlab-security-incident-attempted-exploitation-of-cve-2026-97229-150x150.png",150,150,true],"medium":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/10\/news-22634-gitlab-security-incident-attempted-exploitation-of-cve-2026-97229-300x158.png",300,158,true],"medium_large":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/10\/news-22634-gitlab-security-incident-attempted-exploitation-of-cve-2026-97229-768x403.png",640,336,true],"large":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/10\/news-22634-gitlab-security-incident-attempted-exploitation-of-cve-2026-97229-1024x538.png",640,336,true],"1536x1536":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/10\/news-22634-gitlab-security-incident-attempted-exploitation-of-cve-2026-97229.png",1200,630,false],"2048x2048":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/10\/news-22634-gitlab-security-incident-attempted-exploitation-of-cve-2026-97229.png",1200,630,false],"morenews-large":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/10\/news-22634-gitlab-security-incident-attempted-exploitation-of-cve-2026-97229-825x575.png",825,575,true],"morenews-medium":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/10\/news-22634-gitlab-security-incident-attempted-exploitation-of-cve-2026-97229-590x410.png",590,410,true]},"author_info":{"info":["\uc815\ud558\ubbfc"]},"category_info":"<a href=\"https:\/\/jore2.com\/?cat=405\" rel=\"category\">\ub274\uc2a4<\/a>","tag_info":"\ub274\uc2a4","comment_count":"0","_links":{"self":[{"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/posts\/49009","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=49009"}],"version-history":[{"count":0,"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/posts\/49009\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/media\/49008"}],"wp:attachment":[{"href":"https:\/\/jore2.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=49009"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=49009"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=49009"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}