#968850 software-properties: CVE-2020-15709

Package:
src:software-properties
Source:
software-properties
Submitter:
Salvatore Bonaccorso
Date:
2021-05-06 17:42:05 UTC
Severity:
important
Tags:
#968850#5
Date:
2020-08-22 11:14:19 UTC
From:
To:
Hi,

The following vulnerability was published for software-properties.

CVE-2020-15709[0]:
| ansi escape sequence injection in add-apt-repository

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2020-15709
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15709
[1] https://www.openwall.com/lists/oss-security/2020/08/03/1
[2] https://bugs.launchpad.net/ubuntu/+source/software-properties/+bug/1890286

Regards,
Salvatore
#968850#14
Date:
2021-05-06 17:40:00 UTC
From:
To:
Am Sat, Aug 22, 2020 at 01:14:19PM +0200 schrieb Salvatore Bonaccorso:

Can we still get that fixed for bullseye? Or is this really only relevant
for Ubuntu?

Cheers,
        Moritz