diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1287f63d..83cca47d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,7 @@
 - [cri-o: 1.12.1](https://github.com/kubernetes-incubator/cri-o/releases/tag/v1.12.1)
 - [skopeo: 0.1.32](https://github.com/containers/skopeo/releases/tag/v0.1.32)
 - [podman: 0.11.1](https://github.com/containers/libpod/releases/tag/v0.11.1)
+- Gemfile.lock: fix [CVE-2018-16471](https://nvd.nist.gov/vuln/detail/CVE-2018-16471) and [CVE-2018-16470](https://nvd.nist.gov/vuln/detail/CVE-2018-16470)
 
 
 # 1.12.2 (28.10.2018)
diff --git a/Gemfile.lock b/Gemfile.lock
index 476aac2a..1ea5c531 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -133,7 +133,7 @@ GEM
     polyglot (0.3.5)
     proxifier (1.0.3)
     public_suffix (3.0.3)
-    rack (2.0.5)
+    rack (2.0.6)
     rake (12.3.0)
     retryable (2.0.4)
     rspec (3.8.0)