Does Apple maintain the security of the Ruby implementation that comes by default in OS X?
I recently heard about CVE-2013-4073, but when I ran "Software Update..." on my OS X Lion box, it didn't update Ruby. Also, I've never noticed a Software Update that changed the Ruby that OS X supplies.
I checked the version of Ruby, and it was prior to patchlevel 374
ruby 1.8.7 (2012-02-08 patchlevel 358) [universal-darwin11.0]
If Apple doesn't do security updates for the built-in Ruby, does that mean that it's a potential security risk, for example if a careless user decided to use it for programming-related tasks?