diff --git a/configs/projects/_shared-agent-components.rb b/configs/projects/_shared-agent-components.rb index 6e722cc46..bbcc60c9e 100644 --- a/configs/projects/_shared-agent-components.rb +++ b/configs/projects/_shared-agent-components.rb @@ -62,6 +62,12 @@ proj.component 'rubygem-fast_gettext' proj.component 'rubygem-ffi' +# We add rexml explicitly in here because even though ruby 3 ships with rexml as its default gem, the version +# of rexml it ships with contains CVE-2024-41946, CVE-2024-41123, CVE-2024-35176 and CVE-2024-39908. +# So, we add it here to update to a higher version +# free from the CVEs. +proj.component 'rubygem-rexml' + if platform.is_windows? || platform.is_solaris? || platform.is_aix? proj.component 'rubygem-minitar' end diff --git a/configs/projects/agent-runtime-7.x.rb b/configs/projects/agent-runtime-7.x.rb index 1d55aeec8..93f45363a 100644 --- a/configs/projects/agent-runtime-7.x.rb +++ b/configs/projects/agent-runtime-7.x.rb @@ -61,11 +61,6 @@ proj.component 'rubygem-thor' proj.component 'rubygem-scanf' - # We add rexml explicitly in here because even though ruby 2 ships with rexml as its default gem, the version - # of rexml it ships with contains CVE-2024-35176 and CVE-2024-39908. So, we add it here to update to a higher version - # free from the CVEs. - proj.component 'rubygem-rexml' - if platform.is_linux? proj.component "virt-what" proj.component "dmidecode" unless platform.architecture =~ /ppc64/ diff --git a/configs/projects/agent-runtime-main.rb b/configs/projects/agent-runtime-main.rb index 4f3e8398e..76da6259f 100644 --- a/configs/projects/agent-runtime-main.rb +++ b/configs/projects/agent-runtime-main.rb @@ -63,6 +63,7 @@ proj.component 'rubygem-thor' proj.component 'rubygem-scanf' + if platform.is_linux? proj.component "virt-what" proj.component "dmidecode" unless platform.architecture =~ /ppc64/