Skip to content

Draft: Update bundler in gitlab-ruby

Gerard Hickey requested to merge 3050-update-bundler into master

A customer scan brought to our attention that gitlab-ruby is set to use a version of the bundler gem that is vulnerable to CVE-2021-43809.

Solution

Upgrade the bundler version used in gitlab-ruby to >=2.2.33

Closes gitlab-org/charts/gitlab#3050 (closed)

Merge request reports