Two vulnerabilities have been reported in Ruby, which can be exploited by malicious people to bypass certain security restrictions.

1) An error in the handling of the "alias" functionality can be exploited to bypass the safe level protection and replace methods called in the trusted level.

2) An error caused due to directory operations not being properly checked can be exploited to bypass the safe level protection and close untainted directory streams.

The vulnerabilities have been reported in version 1.8.4 and prior.

Solution
The vulnerabilities have been fixed in a snapshot version and will also be fixed in the upcoming 1.8.5 version.

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
JP Vendor Status Notes (Japanese):
http://jvn.jp/jp/JVN%2383768862/index.html
http://jvn.jp/jp/JVN%2313947696/index.html

Deep Links
Links available to Secunia VIM customers