Accepted ruby2.3 2.3.3-1+deb9u10 (source) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 19 Sep 2021 09:10:46 +0530
Source: ruby2.3
Architecture: source
Version: 2.3.3-1+deb9u10
Distribution: stretch-security
Urgency: high
Maintainer: Antonio Terceiro <terceiro@debian.org>
Changed-By: Utkarsh Gupta <utkarsh@debian.org>
Changes:
ruby2.3 (2.3.3-1+deb9u10) stretch-security; urgency=high
.
* Add patch to use File.open to fix the OS Command
Injection vulnerability. (Fixes: CVE-2021-31799)
* Add patch to fix StartTLS stripping vulnerability.
(Fixes: CVE-2021-32066)
* Add patch to ignore IP addresses in PASV responses
by default. (Fixes: CVE-2021-31810)
Checksums-Sha1:
f6889cf4278fc5a53858a96e011febc4c54dd5cd 2536 ruby2.3_2.3.3-1+deb9u10.dsc
f47b1a3beb1dee13355a3d5e6f23ee7e03428e8b 8359724 ruby2.3_2.3.3.orig.tar.xz
d68da8eb2f9409f3d3bd9abbcff89ee84e8e3579 130688 ruby2.3_2.3.3-1+deb9u10.debian.tar.xz
6bc52535e3171b36e7df42ca2e6badd8ed06db59 6876 ruby2.3_2.3.3-1+deb9u10_source.buildinfo
Checksums-Sha256:
f5f0888eafa9ce03e5377f78479f4af70a0ac83200ac0a71a965d3dd03e1a3c6 2536 ruby2.3_2.3.3-1+deb9u10.dsc
799796bb740832c7257f45089fdbd9cd57686cac033f88d0b078063b6d3d77ad 8359724 ruby2.3_2.3.3.orig.tar.xz
cae122455e78e893055fe198f60fbfaa0f6f76698f6fa84ed25d4d3dcaec1bed 130688 ruby2.3_2.3.3-1+deb9u10.debian.tar.xz
ab7838623c68a749259370399587950fc988473ad3fdb2f3a109f6895fa56738 6876 ruby2.3_2.3.3-1+deb9u10_source.buildinfo
Files:
25be4a1ef8d0961bdf31a32793c274aa 2536 ruby optional ruby2.3_2.3.3-1+deb9u10.dsc
c331a69a24e5ed52d7ccecf08e4ed5e8 8359724 ruby optional ruby2.3_2.3.3.orig.tar.xz
6cc7e4edf9b10462a8e6150c90c1c4c6 130688 ruby optional ruby2.3_2.3.3-1+deb9u10.debian.tar.xz
55cd23a074d05ffd01e68b43a181a418 6876 ruby optional ruby2.3_2.3.3-1+deb9u10_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=w4Md
-----END PGP SIGNATURE-----