diff --git a/configs/projects/_shared-agent-components.rb b/configs/projects/_shared-agent-components.rb index 39feda9be..8834028c1 100644 --- a/configs/projects/_shared-agent-components.rb +++ b/configs/projects/_shared-agent-components.rb @@ -62,11 +62,6 @@ proj.component 'rubygem-fast_gettext' proj.component 'rubygem-ffi' -# We add rexml explicitly in here because even though ruby 3 ships with rexml as its default gem, the version -# of rexml it ships with contains CVE-2024-41946, CVE-2024-41123, CVE-2024-35176 and CVE-2024-39908. -# So, we add it here to update to a higher version -# free from the CVEs. -proj.component 'rubygem-rexml' if platform.is_windows? || platform.is_solaris? || platform.is_aix? proj.component 'rubygem-minitar' diff --git a/configs/projects/agent-runtime-7.x.rb b/configs/projects/agent-runtime-7.x.rb index 93f45363a..edda69e0f 100644 --- a/configs/projects/agent-runtime-7.x.rb +++ b/configs/projects/agent-runtime-7.x.rb @@ -61,6 +61,12 @@ proj.component 'rubygem-thor' proj.component 'rubygem-scanf' + # We add rexml explicitly in here because even though ruby 3 ships with rexml as its default gem, the version + # of rexml it ships with contains CVE-2024-41946, CVE-2024-41123, CVE-2024-35176 and CVE-2024-39908. + # So, we add it here to update to a higher version + # free from the CVEs. + proj.component 'rubygem-rexml' + if platform.is_linux? proj.component "virt-what" proj.component "dmidecode" unless platform.architecture =~ /ppc64/