Slackware: 2017-353-01 Critical: Ruby Command Execution Issue

Here are the details from the Slackware 14.2 ChangeLog: patches/packages/ruby-2.2.9-i586-1_slack14.2.txz: Upgraded. This update fixes a security issue: Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and puttextfile use Kernel#open to open a local file. If the localfile argument starts with the pipe character "|", the command following the pipe character is executed. The default value of localfile is File.basename(remotefile), so malicious FTP servers could cause arbitrary command execution. For more information, see: https://www.cve.org/CVERecord?id=CVE-2017-17405 (* Security fix *)