Skip to content

Commit 07255da

Browse files
committed
(PA-7105) Remove rubygem-rexml component from main and add only to 7.x
1 parent a792264 commit 07255da

File tree

2 files changed

+6
-5
lines changed

2 files changed

+6
-5
lines changed

configs/projects/_shared-agent-components.rb

-5
Original file line numberDiff line numberDiff line change
@@ -62,11 +62,6 @@
6262
proj.component 'rubygem-fast_gettext'
6363
proj.component 'rubygem-ffi'
6464

65-
# We add rexml explicitly in here because even though ruby 3 ships with rexml as its default gem, the version
66-
# of rexml it ships with contains CVE-2024-41946, CVE-2024-41123, CVE-2024-35176 and CVE-2024-39908.
67-
# So, we add it here to update to a higher version
68-
# free from the CVEs.
69-
proj.component 'rubygem-rexml'
7065

7166
if platform.is_windows? || platform.is_solaris? || platform.is_aix?
7267
proj.component 'rubygem-minitar'

configs/projects/agent-runtime-7.x.rb

+6
Original file line numberDiff line numberDiff line change
@@ -61,6 +61,12 @@
6161
proj.component 'rubygem-thor'
6262
proj.component 'rubygem-scanf'
6363

64+
# We add rexml explicitly in here because even though ruby 3 ships with rexml as its default gem, the version
65+
# of rexml it ships with contains CVE-2024-41946, CVE-2024-41123, CVE-2024-35176 and CVE-2024-39908.
66+
# So, we add it here to update to a higher version
67+
# free from the CVEs.
68+
proj.component 'rubygem-rexml'
69+
6470
if platform.is_linux?
6571
proj.component "virt-what"
6672
proj.component "dmidecode" unless platform.architecture =~ /ppc64/

0 commit comments

Comments
 (0)