Publishing details

• Published on 2017-12-09

Changelog

bzr (2.6.0+bzr6595-6+deb8u1) jessie-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Use 'localhost' rather than '127.0.0.1' in SSL certificates, as the latter
    trips up pycurl (Closes: #868966)
  * Ship a refreshed copy of the ssl certs used in testsuite
  * Prevent SSH command line options from being specified in bzr+ssh:// URLs
    (CVE-2017-14176) (Closes: #874429)

 -- Salvatore Bonaccorso <email address hidden>  Tue, 28 Nov 2017 21:44:25 +0100

Builds

Package files

• bzr_2.6.0+bzr6595-6+deb8u1.debian.tar.xz (63.1 KiB)
• bzr_2.6.0+bzr6595-6+deb8u1.dsc (2.8 KiB)
• bzr_2.6.0+bzr6595.orig.tar.gz (10.4 MiB)