-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-698737a3c5 2024-01-19 03:23:32.715488 --------------------------------------------------------------------------------
Name : espeak-ng Product : Fedora 38 Version : 1.51.1 Release : 6.fc38 URL : https://github.com/espeak-ng/espeak-ng Summary : eSpeak NG Text-to-Speech Description : The eSpeak NG (Next Generation) Text-to-Speech program is an open source speech synthesizer that supports over 70 languages. It is based on the eSpeak engine created by Jonathan Duddington. It uses spectral formant synthesis by default which sounds robotic, but can be configured to use Klatt formant synthesis or MBROLA to give it a more natural sound.
-------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2023-49990, CVE-2023-49991, CVE-2023-49992, CVE-2023-49993, CVE-2023-49994. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 3 2024 Jaroslav ��karvada jskarvad@redhat.com - 1.51.1-6 - Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c Resolves: CVE-2023-49990 - Fixed buffer underflow in CountVowelPosition function at synthdata.c Resolves: CVE-2023-49991 - Fixed buffer overflow in RemoveEnding at dictionary.c Resolves: CVE-2023-49992 - Fixed buffer overflow in ReadClause function at readclause.c Resolves: CVE-2023-49993 - Fixed floating point exception in PeaksToHarmspect at wavegen.c Resolves: CVE-2023-49994 * Tue Jan 2 2024 Tomas Korbar tkorbar@redhat.com - 1.51.1-5 - Change license tag so it fully conforms to SPDX * Wed Jul 19 2023 Fedora Release Engineering releng@fedoraproject.org - 1.51.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2254229 - CVE-2023-49990 espeak-ng: buffer overflow in SetUpPhonemeTable function at synthdata.c https://bugzilla.redhat.com/show_bug.cgi?id=2254229 [ 2 ] Bug #2254231 - CVE-2023-49991 espeak-ng: buffer underflow in CountVowelPosition function at synthdata.c https://bugzilla.redhat.com/show_bug.cgi?id=2254231 [ 3 ] Bug #2254232 - CVE-2023-49992 espeak-ng: buffer overflow in RemoveEnding at dictionary.c https://bugzilla.redhat.com/show_bug.cgi?id=2254232 [ 4 ] Bug #2254233 - CVE-2023-49993 espeak-ng: buffer overflow in ReadClause function at readclause.c https://bugzilla.redhat.com/show_bug.cgi?id=2254233 [ 5 ] Bug #2254235 - CVE-2023-49994 espeak-ng: floating point exception in PeaksToHarmspect at wavegen.c https://bugzilla.redhat.com/show_bug.cgi?id=2254235 --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-698737a3c5' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------