ruby -- $SAFE escaping vulnerability about Exception#to_s/NameError#to_s

The official ruby site reports: Vulnerabilities found for Exceptiontos, NameErrortos, and nameerrmesgtos which is Ruby interpreter-internal API. A malicious user code can bypass $SAFE check by utilizing one of those security holes. Ruby's $SAFE mechanism enables untrusted user codes to run in $SA...

Fedora 7 : mailman-2.1.9-5.3 (2008-1356)

Tue Feb 5 2008 Tomas Smetana - 3:2.1.9-5.3 - patch for CVE-2008-0564; XSS triggerable by list administrator - Wed Dec 5 2007 Tomas Smetana - 3:2.1.9-5.2 - more LCCTYPE fixes - Tue Oct 16 2007 Tomas Smetana - 3:2.1.9-5.1 - fix 333011 -- withlist crashes with NameError Note that Tenable Network...