Out of date Ruby within Spiceworks.  Should I worry?

tonycoates2939 · 2013-08-31T20:15:40.000Z

Newest release of Spiceworks uses Ruby v1.93.194 while the latest version including one or more security fixes is 1.9.3.448. Should I be worried?

Little-Green-Man · 2013-08-31T20:59:02.000Z

If you are on 6.2 I wouldn’t be too concerned at the moment, Spiceworks 7 RC1 is out and a final release is on the horizon. I would expect that the new version will be fully updated.

tonycoates2939 · 2013-08-31T22:10:38.000Z

Yes thanks. I’m on the latest Spiceworks (6.2.00919). Many thanks for your speedy reply, and your advice!

Little-Green-Man · 2013-08-31T22:34:16.000Z

In the meantime, feel free to reach out to support@spiceworks.com, or PM Aaron@Spiceworks. Should be able to get a more precise answer on that.

texkonc · 2013-09-01T00:15:47.000Z

It takes time for Developers to load the Ruby version, QA it, and build on it. Typical adoption lifestyle for software of a dev team to use. That is not far behind at all, its not like the app is on 1.00.

I have to give the dev team props for keeping it up to very close.

magnus369 · 2013-09-01T01:46:50.000Z

I don’t know that anyone can answer if you should worry or not- I would think that would be solved by checking the change logs for ruby directly, as well as various security sites for vulnerabilities, such as (and most certainly not limted to)

http://web.nvd.nist.gov/view/vuln/search-results?query=ruby&search_type=all&cves=on

http://search.cert.org/search?q=ruby&btnG.x=0&btnG.y=0&entqr=0&ud=1&sort=date%3AD%3AL%3Ad1&output=xml_no_dtd&oe=UTF-8&ie=UTF-8&client=default_frontend&proxystylesheet=default_frontend&site=default_collection

tonycoates2939 · 2013-09-01T12:56:35.000Z

Many thanks guys. I completely understand the dev cycle. If you guys use Secunia’s tools, you may have noticed that it flags this. As has been said above, I will await the next update. Thanks again.