-
bzr (2.6.0+bzr6595-6+deb8u1) jessie-security; urgency=high
* Non-maintainer upload by the Security Team.
* Use 'localhost' rather than '127.0.0.1' in SSL certificates, as the latter
trips up pycurl (Closes: #868966)
* Ship a refreshed copy of the ssl certs used in testsuite
* Prevent SSH command line options from being specified in bzr+ssh:// URLs
(CVE-2017-14176) (Closes: #874429)
-- Salvatore Bonaccorso <email address hidden> Tue, 28 Nov 2017 21:44:25 +0100
-
bzr (2.6.0+bzr6595-6) unstable; urgency=medium
* Re-add python-paramiko as build-dependency now 1.14.1 is in the
archive.
* Re-remove myself from uploaders.
* Use bundled configobj again, because system configobj has
changed behaviour that breaks the bzr testsuite, reverting
patch 02_external_configobj. Closes: #760054
* Add 08_disable_put_file_unicode: Disable test_put_file_unicode for now,
which is broken for SFTP because of upstream changes in paramiko.
* Team upload.
-- Jelmer Vernooij <email address hidden> Sun, 07 Sep 2014 20:34:03 +0200
-
bzr (2.6.0+bzr6595-4) unstable; urgency=medium
* For autopktest, install python-{medusa,lzma,meliae,pycurl} to avoid
skipping tests.
* Allow autopkgtest to output to standard error.
-- Jelmer Vernooij <email address hidden> Fri, 18 Jul 2014 00:04:57 +0200
-
bzr (2.6.0+bzr6595-2) unstable; urgency=medium
* Use canonical URL for Vcs-Bzr.
* Conflict and build-conflict with newer versions of paramiko that no
longer accept 'buffer' objects. This is a stop-gap until paramiko is
fixed. Closes: #750347
* Add patch 06_win32_paths: Fixes some unit tests for win32-specific
functions.
-- Jelmer Vernooij <email address hidden> Fri, 11 Jul 2014 00:58:14 +0200
-
bzr (2.6.0+bzr6595-1) unstable; urgency=medium
[ Jelmer Vernooij ]
* Re-add myself to uploaders.
* Don't pass blob to file.writelines(), but rather to file.write().
Closes: #722091
[ Dimitri John Ledkov ]
* New upstream snapshot:
- verify-signature crashes on non ascii characters (LP: #1123460)
- verify-signature crashes when acceptable_keys is defined (LP:
#1249732)
-- Dimitri John Ledkov <email address hidden> Thu, 01 May 2014 18:27:49 +0100
-
bzr (2.6.0+bzr6593-1) unstable; urgency=medium
* New upstream snapshot:
- Use LooseVersion from distutils to check Pyrex/Cython version
in order to handle non-integers in the version string.
Closes: #743096, #683130, LP: #1030521
- Fix test failures with python-2.7.6 (LP: #1303879).
* debian/control: No longer suggest bzr-svn (Closes: #709290).
-- Andrew Starr-Bochicchio <email address hidden> Wed, 09 Apr 2014 20:26:48 -0400
-
bzr (2.6.0+bzr6591-1) unstable; urgency=low
* New upstream snapshot.
- Remove wrong assumption about how TCP server and client interact
when run inside the same process. (Closes: #736158, LP #1269886).
- The XDG Base Directory Specification uses the XDG_CACHE_HOME,
not XDG_CACHE_DIR (Closes: #736448).
* Drop 04_test_netrc_fix_perms, applied upstream.
* Bump Standards-Version to 3.9.5, no changes needed.
-- Andrew Starr-Bochicchio <email address hidden> Wed, 12 Feb 2014 14:26:26 -0500
-
bzr (2.6.0-3) unstable; urgency=low
* Backport upstream commit that makes .netrc 0600 in tests so
python-2.7.5-8's netrc is happy (Closes: #723894).
-- Andrew Starr-Bochicchio <email address hidden> Fri, 04 Oct 2013 18:10:33 -0400
-
bzr (2.6.0~bzr6574-1) unstable; urgency=low
* New upstream snapshot.
- Fix CVE 2013-2009. Avoid allowing multiple wildcards in a single
SSL cert hostname segment (Closes: #709068, LP: #1182124).
-- Andrew Starr-Bochicchio <email address hidden> Mon, 20 May 2013 19:16:44 -0400
-
bzr (2.6.0~bzr6526-1) unstable; urgency=low
* New upstream snapshot.
-- Jelmer Vernooij <email address hidden> Fri, 22 Jun 2012 01:28:50 +0200
