Security vulnerabilities in Wine when handling EMF files

[Robert Gawlik]

============================================================
# Security vulnerabilities in Wine when handling EMF files #
============================================================

Bug Description was moved to attachment advisory.txt

Thank you!!

Best regards,
Robert Gawlik
(Ruhr-Universität Bochum)

[Robert Gawlik (rh0)]

since there were newlines inserted into the bug description which made it less readable I attached it as advisory.txt

[Steve Beattie (sbeattie)]

Hi Robert, thanks for the report. Has the upstream wine project been notified? As wine is in universe, it is community maintained. If you are able, I suggest coordinating with upstream and posting a debdiff for this issue. When a debdiff is available, members of the security team will review it and publish the package. See the following link for more information: https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures .

Thanks!

[Robert Gawlik (rh0)]

I informed https://launchpad.net/~ubuntu-wine. I can also file a bug report to https://bugs.winehq.org, but I didn't find an option to mark reports as private there, hence everybody would see it. If that's ok, I can still do it.

[Steve Beattie (sbeattie)]

Hi Robert, for reports that should be kept embargoed, I believe you can contact Alexandre Julliard <email address hidden> (wine lead developer) and CC: Marcus Meissner <email address hidden> (wine developer and SuSE security contact). Thanks!

[Scott Ritchie (scottritchie)]

I already contacted julliard@ out of band, and he's fine with putting the reports public now.

[Seth Arnold (seth-arnold)]

Hello Robert, Scott, do you know if CVE numbers have been assigned for these issues yet? Are patches available from upstream?

Thanks

[Robert Gawlik (rh0)]

Hello Seth,

afaik there are no CVEs assigned yet. I split the report and submitted three bugs finally today:
https://bugs.winehq.org/show_bug.cgi?id=45104
https://bugs.winehq.org/show_bug.cgi?id=45105
https://bugs.winehq.org/show_bug.cgi?id=45106

Best regards!