CVEs related to bugs in Bazaar

Open bugs

Bug	CVE(s)
Bug #1710979: bzr+ssh URLs don't strip SSH options	CVE-2017-14176
Bazaar	Confirmed (unassigned)

Resolved bugs

Bug	CVE(s)
Bug #1182124: [CVE-2013-2099] ssl.match_hostname() trips over crafted wildcard names	CVE-2013-2099
Bazaar	Fix released, assigned to Andrew Starr-Bochicchio