Debian Libgig vulnerabilities

CVE-2017-12951 [MEDIUM] CVE-2017-12951: libgig - The gig::DimensionRegion::CreateVelocityTable function in gig.cpp in libgig 4.0.... The gig::DimensionRegion::CreateVelocityTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted gig file. Scope: local bookworm: resolved (fixed in 4.0.0-5) bullseye: resolved (fixed in 4.0.0-5) forky: resolved (fixed in 4.0.0-5) sid: resolved (fixed in 4.0.0-5

CVE-2017-12950 [MEDIUM] CVE-2017-12950: libgig - The gig::Region::Region function in gig.cpp in libgig 4.0.0 allows remote attack... The gig::Region::Region function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted gig file. Scope: local bookworm: resolved (fixed in 4.0.0-4) bullseye: resolved (fixed in 4.0.0-4) forky: resolved (fixed in 4.0.0-4) sid: resolved (fixed in 4.0.0-4) trixie: resolved (fixed

CVE-2017-12952 [MEDIUM] CVE-2017-12952: libgig - The LoadString function in helper.h in libgig 4.0.0 allows remote attackers to c... The LoadString function in helper.h in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted gig file. Scope: local bookworm: resolved (fixed in 4.0.0-4) bullseye: resolved (fixed in 4.0.0-4) forky: resolved (fixed in 4.0.0-4) sid: resolved (fixed in 4.0.0-4) trixie: resolved (fixed in 4.0.0

CVE-2017-12953 [MEDIUM] CVE-2017-12953: libgig - The gig::Instrument::UpdateRegionKeyTable function in gig.cpp in libgig 4.0.0 al... The gig::Instrument::UpdateRegionKeyTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (invalid memory write and application crash) via a crafted gig file. Scope: local bookworm: resolved (fixed in 4.0.0-4) bullseye: resolved (fixed in 4.0.0-4) forky: resolved (fixed in 4.0.0-4) sid: resolved (fixed in 4.0.0-4) trixie: re

CVE-2017-12954 [MEDIUM] CVE-2017-12954: libgig - The gig::Region::GetSampleFromWavePool function in gig.cpp in libgig 4.0.0 allow... The gig::Region::GetSampleFromWavePool function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted gig file. Scope: local bookworm: resolved (fixed in 4.0.0-5) bullseye: resolved (fixed in 4.0.0-5) forky: resolved (fixed in 4.0.0-5) sid: resolved (fixed in 4.0.0-5) trixie: resolv