link to third party with CVE number not properly linkified

[setharnold]

Hello, a recent samba issue has a link to an upstream advisory:

https://www.samba.org/samba/security/CVE-2020-25717.html

This is actually rendered in our html as something else, two links, one to:

https://www.samba.org/samba/security/

and the other one to:

https://ubuntu.com/security/CVE-2020-25717

Thanks

---

Reported from: https://ubuntu.com/security/notices/USN-5142-1

[carkod]

@mtruj013 do you know if we can just go to the DB and modified this specific item?

[selzoc]

This has also has occurred in https://ubuntu.com/security/notices/USN-5822-1.

It seems like there is something in the publishing process that scans for CVE-XXXX-XXXX and inserts links to https://ubuntu.com/security/CVE-XXXX-XXXX, even if it occurs in a URL for, say samba.org.

[petesfrench]

I believe this bit of regex is the culprit, I will see if I am able to get something working https://github.com/canonical/ubuntu.com/blob/main/webapp/security/views.py#L29

[mtruj013]

Fixed in https://github.com/canonical/ubuntu.com/pull/14198, closing