diff --git a/WORKSPACE b/WORKSPACE
index a7b37af..a23c9c0 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -138,11 +138,11 @@
 )
 
 container_pull(
-    name = "gerrit-3.3.0",
+    name = "gerrit-3.3.2",
     registry = "index.docker.io",
     repository = "gerritcodereview/gerrit",
-    tag = "3.3.0-ubuntu20",
-    digest = "sha256:c7c43db7be19394a9a5f28a016d0063be2713144dc4bb815ceb698c895bc88d1",
+    tag = "3.3.2-ubuntu20",
+    digest = "sha256:f7fc8b749706f38475f94191117091973914a8f084e69518deff7dbc9c2c557d",
 )
 
 # third_party/factorio
diff --git a/devtools/gerrit/BUILD b/devtools/gerrit/BUILD
index 898b13f..3a26e39 100644
--- a/devtools/gerrit/BUILD
+++ b/devtools/gerrit/BUILD
@@ -2,7 +2,7 @@
 
 container_image(
     name="with_plugins",
-    base="@gerrit-3.3.0//image",
+    base="@gerrit-3.3.2//image",
     files = [
         "//devtools/gerrit/gerrit-oauth-provider:gerrit-oauth-provider",
         "@com_googlesource_gerrit_plugin_owners//owners:owners.jar",
@@ -13,7 +13,7 @@
     directory = "/var/gerrit-plugins",
 )
 container_image(
-    name="3.3.0-r7",
+    name="3.3.2-r1",
     base=":with_plugins",
     files = [":entrypoint.sh"],
     directory = "/",
@@ -22,9 +22,9 @@
 
 container_push(
     name = "push",
-    image = ":3.3.0-r7",
+    image = ":3.3.2-r1",
     format = "Docker",
     registry = "registry.k0.hswaw.net",
     repository = "q3k/gerrit",
-    tag = "3.3.0-r7",
+    tag = "3.3.2-r1",
 )
diff --git a/devtools/gerrit/kube/gerrit.libsonnet b/devtools/gerrit/kube/gerrit.libsonnet
index 00272a1..0106f17 100644
--- a/devtools/gerrit/kube/gerrit.libsonnet
+++ b/devtools/gerrit/kube/gerrit.libsonnet
@@ -38,7 +38,7 @@
             address: "gerrit@hackerspace.pl",
         },
 
-        tag: "3.3.0-r7",
+        tag: "3.3.2-r1",
         image: "registry.k0.hswaw.net/q3k/gerrit:" + cfg.tag,
         resources: {
             requests: {