- ruby2.3 (2.3.3-1+deb9u9+rpi1) stretch-staging; urgency=medium
++ruby2.3 (2.3.3-1+deb9u10+rpi1) stretch-staging; urgency=medium
+
+ [changes brought forward from 2.3.3-1+deb9u1+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Sat, 21 Oct 2017 22:40:37 +0000]
+ * Disable testsuite.
+
- -- Raspbian forward porter <root@raspbian.org> Thu, 01 Oct 2020 22:03:49 +0000
++ -- Raspbian forward porter <root@raspbian.org> Wed, 13 Oct 2021 14:59:02 +0000
++
+ ruby2.3 (2.3.3-1+deb9u10) stretch-security; urgency=high
+
+ * Add patch to use File.open to fix the OS Command
+ Injection vulnerability. (Fixes: CVE-2021-31799)
+ * Add patch to fix StartTLS stripping vulnerability.
+ (Fixes: CVE-2021-32066)
+ * Add patch to ignore IP addresses in PASV responses
+ by default. (Fixes: CVE-2021-31810)
+
+ -- Utkarsh Gupta <utkarsh@debian.org> Sun, 19 Sep 2021 09:10:46 +0530
ruby2.3 (2.3.3-1+deb9u9) stretch-security; urgency=high