Debian Security Advisory DSA 860-1 – Yutaka Oiwa discovered a bug in Ruby, the interpreter for the object-oriented scripting language, that can cause illegal program code to bypass the safe level and taint flag protections check and be executed.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/40627/dsa-860-1.txt
Source: https://packetstormsecurity.com/files/40627/Debian-Linux-Security-Advisory-860-1.html