A flaw was corrected in rubygem-mail version 2.4.4: A file system traversal in file_delivery method [1]. [1] https://github.com/mikel/mail/commit/29aca25218e4c82991400eb9b0c933626aefc98f
This was previously tracked via bug 816352 along with CVE-2012-2140. The bug was split as explained in bug 816352, comment 13.