| Release | Version | 
|---|---|
| bullseye | 2.7.0+bzr6622+brz | 
| bookworm | 2.7.0+bzr6622+brz | 
| trixie | 2.7.0+bzr6622+brz | 
| Bug | Description | 
|---|---|
| CVE-2017-14176 | Bazaar through 2.7.0, when Subprocess SSH is used, allows remote attac ... | 
| CVE-2013-2099 | Algorithmic complexity vulnerability in the ssl.match_hostname functio ... | 
| DSA / DLA | Description | 
|---|---|
| DSA-4052-1 | bzr - security update | 
| DLA-1107-1 | bzr - security update |