Followup-For: Bug #964274 Hi,
CVE-2020-7663 is fixed in stretch-security but not buster, making upgrades difficult since stetch-security has a newer version than buster. Please upload the fix to buster, too. ruby-websocket-extensions | 0.1.2-1 | stretch | source, all ruby-websocket-extensions | 0.1.2-1 | buster | source, all ruby-websocket-extensions | 0.1.2-1+deb9u1 | stretch-security | source, all ruby-websocket-extensions | 0.1.5-1 | bullseye | source, all ruby-websocket-extensions | 0.1.5-1 | sid | source, all Andreas