bzr vulnerabilities (Debian)

2 vulnerabilities.

• bzr Debian Bazaar allows remote attackers to execute arbitrary commands via a bzr+ssh URL with initial dash character in hostname CVE-2017-14176 Fix available 8.8 HighSeptember 5, 2017
• bzr Debian Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x,... CVE-2013-2099 Fix available 4.3 MediumMay 16, 2013