diff --git a/bundler-2.2.19.gem b/bundler-2.2.19.gem
deleted file mode 100644
index 91bf8aee9084623b562dad218e8b5e99e7c045cd..0000000000000000000000000000000000000000
Binary files a/bundler-2.2.19.gem and /dev/null differ
diff --git a/bundler-2.2.33.gem b/bundler-2.2.33.gem
new file mode 100644
index 0000000000000000000000000000000000000000..8b1384798e6c4216f49bb71c764475640d907440
Binary files /dev/null and b/bundler-2.2.33.gem differ
diff --git a/bundler-v2.2.19.tar.gz b/bundler-v2.2.33.tar.gz
similarity index 37%
rename from bundler-v2.2.19.tar.gz
rename to bundler-v2.2.33.tar.gz
index b6929a26f2a28d46a8f9c35b12ba0ff40287b7d4..8852cd97364e424b1e4a3cc8cfda5ce5e5af13a4 100644
Binary files a/bundler-v2.2.19.tar.gz and b/bundler-v2.2.33.tar.gz differ
diff --git a/rubygem-bundler.spec b/rubygem-bundler.spec
index 268490c4913155bace36fcab097bfbe0cdc1db66..3c8892c06257d26f661186ff3ed5d75018140c50 100644
--- a/rubygem-bundler.spec
+++ b/rubygem-bundler.spec
@@ -7,7 +7,7 @@
 %global thor_version 1.1.0
 
 Name: rubygem-%{gem_name}
-Version: 2.2.19
+Version: 2.2.33
 Release: 1
 Summary: Library and utilities to manage a Ruby application's gem dependencies
 License: MIT
@@ -63,7 +63,7 @@ done
 
 %check
 pushd .%{gem_instdir}
-[ `ls lib/bundler/vendor | wc -l` == 7 ]
+[ `ls lib/bundler/vendor | wc -l` == 8 ]
 
 ruby -e '
   module Bundler; end
@@ -130,6 +130,10 @@ popd
 %doc %{_mandir}/man5/*
 
 %changelog
+* Wed Dec 29 2021 houyingchao <houyingchao@huawei.com> - 2.2.33-1
+- Upgrade to 2.2.33
+- Fix CVE-2021-43809
+
 * Wed Jun 8 2021 zhaomengchao <zhaomengchao3@huawei.com> - 2.2.19-1
 * Upgrade to 2.2.19