Ruby - App-Request



  • File name and path:     C:\Ruby25\bin\ruby.exe
    Product Name:           Ruby interpreter 2.5.3p105 [i386-mingw32]
    Internal Name:          ruby.exe
    Original Filename:      ruby.exe
    
    File Description:       Ruby interpreter (CUI) 2.5.3p105 [i386-mingw32]
    Company:                http://www.ruby-lang.org/
    Legal Copyright:        Copyright (C) 1993-2018 Yukihiro Matsumoto
    Legal Trademarks:       
    Comments:               2018-10-18
    
    File Version String:    2.5.3p105
    File Version:           2.5.3.105
    Product Version String: 2.5.3p105
    Product Version:        2.5.3.105
    

    Website/Download Site
    https://rubyinstaller.org/downloads/

    Version number displayed in the app:
    in interactive Ruby (Ruby interpreter) type:
    RUBY_VERSION
    => "2.5.3"

    from windows command shell type:
    c:>ruby -v
    ruby 2.5.3p105 (2018-10-18 revision 65156) [i386-mingw32]

    App-Icon in ICO format
    0_1541445402437_ruby.exe.ico



  • @Tom OK, there is a new version

    File name and path:     C:\Ruby26\bin\ruby.exe
    Product Name:           Ruby interpreter 2.6.1p33 [i386-mingw32]
    Internal Name:          ruby.exe
    Original Filename:      ruby.exe
    
    File Description:       Ruby interpreter (CUI) 2.6.1p33 [i386-mingw32]
    Company:                http://www.ruby-lang.org/
    Legal Copyright:        Copyright (C) 1993-2019 Yukihiro Matsumoto
    Legal Trademarks:       
    Comments:               2019-01-30
    
    File Version String:    2.6.1p33
    File Version:           2.6.1.33
    Product Version String: 2.6.1p33
    Product Version:        2.6.1.33
    

    C:>ruby -v
    ruby 2.6.1p33 (2019-01-30 revision 66950) [i386-mingw32]


  • VulnDetect Team Member

    @Anselm Thank you.
    Like I mentioned, this is expected to happen (with Ruby), because of the way they update the header of the file.
    So basically, I need to know when they release a new version and go add a lookup, wait for it to be detected and then add a Specific Rule.
    Luckily it is very few programs that does it this way.
    This is something that we can and will change, hopefully soon.



  • @Tom new version 2.6.x is not detected:

    File name and path:     C:\Ruby26\bin\ruby.exe
    Product Name:           Ruby interpreter 2.6.0p0 [i386-mingw32]
    Internal Name:          ruby.exe
    Original Filename:      ruby.exe
    
    File Description:       Ruby interpreter (CUI) 2.6.0p0 [i386-mingw32]
    Company:                http://www.ruby-lang.org/
    Legal Copyright:        Copyright (C) 1993-2018 Yukihiro Matsumoto
    Legal Trademarks:       
    Comments:               2018-12-25
    
    File Version String:    2.6.0p0
    File Version:           2.6.0.0
    Product Version String: 2.6.0p0
    Product Version:        2.6.0.0
    

    ruby 2.6.0p0 (2018-12-25 revision 66547) [i386-mingw32]


  • Community Moderator

    So mark the issue as solved



  • @Tom is shown and version number is correct. I will have a look after the next update.


  • VulnDetect Team Member

    Detection added, however, Ruby may "disappear" after an update, if it does, then ping me. We will fix this soon, so it won't happen.