Source: ruby2.3
Source-Version: 2.3.6-1

The fix for CVE-2017-17405 is included in 2.3.6-1 via:

+Thu Dec 14 23:53:41 2017  NAKAMURA Usaku  <u...@ruby-lang.org>
+
+       * test/net/ftp/test_ftp.rb (process_port_or_eprt): merge a part of
+         r56973 to pass the test introduced at previous commit.
+
+Thu Dec 14 22:55:05 2017  Shugo Maeda  <sh...@ruby-lang.org>
+
+       Fix a command injection vulnerability in Net::FTP.
+
+Thu Dec 14 22:35:19 2017  Eric Wong  <normalper...@yhbt.net>

Regards,
Salvatore

Reply via email to