From b166fcdaf03c54e3a1e78fd5d3d0d1a66af124e4 Mon Sep 17 00:00:00 2001 From: Maqsood Ahmad Date: Mon, 26 Aug 2024 11:30:07 +0530 Subject: [PATCH] (PA-6901) Bump REXML to 3.3.6 to address CVE-2024-43398 --- configs/components/rubygem-rexml.rb | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/configs/components/rubygem-rexml.rb b/configs/components/rubygem-rexml.rb index 48b0ff231..8ea510cd8 100644 --- a/configs/components/rubygem-rexml.rb +++ b/configs/components/rubygem-rexml.rb @@ -1,6 +1,6 @@ component 'rubygem-rexml' do |pkg, settings, platform| - pkg.version '3.3.4' - pkg.md5sum 'b7411377f3c1a9cbe65e862f74067f91' + pkg.version '3.3.6' + pkg.md5sum 'be54ad1a5f661ebf9824bf6ca36e50eb' # If the platform is solaris with sparc architecture in agent-runtime-7.x project, we want to gem install rexml # ignoring the dependencies, this is because the pl-ruby version used in these platforms is ancient so it gets @@ -9,6 +9,6 @@ if platform.name =~ /solaris-(10|11)-sparc/ && settings[:ruby_version].to_i < 3 settings["#{pkg.get_name}_gem_install_options".to_sym] = "--ignore-dependencies" end - + instance_eval File.read('configs/components/_base-rubygem.rb') end