Publishing details

• Published on 2017-12-09

Changelog

bzr (2.7.0+bzr6619-7+deb9u1) stretch-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Use 'localhost' rather than '127.0.0.1' in SSL certificates, as the latter
    trips up pycurl (Closes: #868966)
  * Ship a refreshed copy of the ssl certs used in testsuite
  * Prevent SSH command line options from being specified in bzr+ssh:// URLs
    (CVE-2017-14176) (Closes: #874429)

 -- Salvatore Bonaccorso <email address hidden>  Mon, 27 Nov 2017 21:12:18 +0100

Builds

Package files

• bzr_2.7.0+bzr6619-7+deb9u1.debian.tar.xz (89.9 KiB)
• bzr_2.7.0+bzr6619-7+deb9u1.dsc (3.0 KiB)
• bzr_2.7.0+bzr6619.orig.tar.gz (10.4 MiB)