bzr (2.7.0+bzr6622-7) unstable; urgency=high . * Add patch 27_fix_sec_ssh: Strip out hostnames starting with dash in bzr+ssh URLs, as they might allow an attacker to provide SSH command- line flags. LP: #1710979 bzr (2.7.0+bzr6622-6) unstable; urgency=medium . * Depend on version of cython that produces reproducible C files. * Just ship a refreshed copy of ssl certs, rather than generating them as part of package build - which introduces reproducibility issues. linbox (1.4.2-5) unstable; urgency=medium . * Team upload. . [ Doug Torrance ] * debian/control - Drop libatlas-dev from Build-Depends (Closes: #871713). . [ Sébastien Villemot ] * d/copyright: use https for Format URL. * d/control: - bump Standards-Version to 4.0.1. - fix URL in Vcs-Browser field. - fix typo in liblinbox-doc description. * Bump to debhelper compat level 10. * Effectively skip test-charpoly on mips and mipsel. Thanks to Radovan Birdic for the patch. (Closes: #856356) * d/rules: support the nodoc flag of DEB_BUILD_OPTIONS.