Skip to content

Update bundler to 2.2.33

Gerard Hickey requested to merge 332502-bundler-update into master

In order to remediate CVE-2020-36327 and CVE-2021-43809 the Ruby Bundler gem must be updated to a minimum version of 2.2.33. This MR updates the Bundler gem in all the builder docker images.

Testing is ongoing to insure that the updated Bundler gem does not break the build of omnibus-gitlab. The results of the testing may require a matching omnibus-gitlab MR that gets merged in conjunction with this MR.

Reference gitlab-org/gitlab#332502

Edited by Gerard Hickey

Merge request reports