Merge version 2.3.3-1+deb9u3+rpi1 and 2.3.3-1+deb9u4 to produce 2.3.3-1+deb9u4+rpi1

diff --cc debian/changelog
index ed5495d58de88ac56af0a9107b98183d701383b0,cb2d07df5b8bc3f651cc4d879f67098451abf41b..7647e77b61ce90061aae046dc274e83d9d180a82
--- 1/debian/changelog
--- 2/debian/changelog
+++ b/debian/changelog
@@@ -1,9 -1,13 +1,20 @@@
- ruby2.3 (2.3.3-1+deb9u3+rpi1) stretch-staging; urgency=medium
++ruby2.3 (2.3.3-1+deb9u4+rpi1) stretch-staging; urgency=medium
 +
 +  [changes brought forward from 2.3.3-1+deb9u1+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Sat, 21 Oct 2017 22:40:37 +0000]
 +  * Disable testsuite.
 +
-  -- Raspbian forward porter <root@raspbian.org>  Wed, 17 Oct 2018 11:05:04 +0000
++ -- Raspbian forward porter <root@raspbian.org>  Sun, 04 Nov 2018 11:39:59 +0000
++
+ ruby2.3 (2.3.3-1+deb9u4) stretch-security; urgency=high
+ 
+   * Non-maintainer upload by the Security Team.
+   * OpenSSL::X509::Name equality check does not work correctly
+     (CVE-2018-16395)
+   * pack.c: avoid returning uninitialized String
+   * Tainted flags are not propagated in Array#pack and String#unpack with some
+     directives (CVE-2018-16396)
+ 
+  -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 28 Oct 2018 21:49:57 +0100
  
  ruby2.3 (2.3.3-1+deb9u3) stretch-security; urgency=medium