Source: ruby2.3 Source-Version: 2.3.6-1 The fix for CVE-2017-17405 is included in 2.3.6-1 via:
+Thu Dec 14 23:53:41 2017 NAKAMURA Usaku <u...@ruby-lang.org> + + * test/net/ftp/test_ftp.rb (process_port_or_eprt): merge a part of + r56973 to pass the test introduced at previous commit. + +Thu Dec 14 22:55:05 2017 Shugo Maeda <sh...@ruby-lang.org> + + Fix a command injection vulnerability in Net::FTP. + +Thu Dec 14 22:35:19 2017 Eric Wong <normalper...@yhbt.net> Regards, Salvatore