-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 20 May 2025 19:03:02 +0200 Source: espeak-ng Architecture: source Version: 1.50+dfsg-7+deb11u2 Distribution: bullseye-security Urgency: medium Maintainer: Debian Accessibility Team <pkg-a11y-devel@alioth-lists.debian.net> Changed-By: Thorsten Alteholz <debian@alteholz.de> Changes: espeak-ng (1.50+dfsg-7+deb11u2) bullseye-security; urgency=medium . * Non-maintainer upload by the LTS Team. * CVE-2023-49990 fix buffer overflow in SetUpPhonemeTable() * CVE-2023-49991 fix stack buffer underflow in CountVowelPosition() * CVE-2023-49992 fix stack buffer overflow in RemoveEnding() * CVE-2023-49993 fix buffer overflow in ReadClause() * CVE-2023-49994 fix floating point exception in PeaksToHamspect() Checksums-Sha1: ddde04a1161a171b3331ca27e3f645f46457abce 2730 espeak-ng_1.50+dfsg-7+deb11u2.dsc 9178cdb60fdd505ec467ed912aba6b8068c2bc3f 19074575 espeak-ng_1.50+dfsg.orig.tar.gz 7d34640754b9e7ffefeab9b7280daff619b7d192 65008 espeak-ng_1.50+dfsg-7+deb11u2.debian.tar.xz d45243b83ada8798c010f257b3805a6bca41ec38 10818 espeak-ng_1.50+dfsg-7+deb11u2_amd64.buildinfo Checksums-Sha256: 23a0d274522db9696bdff2000400364b4abdff8f60d7c535d3c7b4671606e421 2730 espeak-ng_1.50+dfsg-7+deb11u2.dsc 1a568d801715cb88c7f30952a0b612b5a475bcd10e02bc748aaa42a1f4ae4431 19074575 espeak-ng_1.50+dfsg.orig.tar.gz 63ecfade89d2796f7ce8e1a3c864c607c2ca3cc0bf5a1e2ed7986e8c1cd79672 65008 espeak-ng_1.50+dfsg-7+deb11u2.debian.tar.xz 87ab647324124aa61fd22622360ff8e401603f81b12157473da7359a69713504 10818 espeak-ng_1.50+dfsg-7+deb11u2_amd64.buildinfo Files: b224aa761c2608873cea3a6b570fa8c9 2730 sound optional espeak-ng_1.50+dfsg-7+deb11u2.dsc f5b0c46e7666d7a5e7e13e7fda3783fe 19074575 sound optional espeak-ng_1.50+dfsg.orig.tar.gz c2f4892a9799230307c61da8d2611cc2 65008 sound optional espeak-ng_1.50+dfsg-7+deb11u2.debian.tar.xz d974afcb905f0ef9677b02852fb46a48 10818 sound optional espeak-ng_1.50+dfsg-7+deb11u2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmg6q6hfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR2IkD/wMQ7XR+g7bZFrn1fTCD5op1rAfpGws i4jmQkhyHE2lqY3grIR9DsYA60TlwLXLN1vJvGy/0BKip2N48sVjUEh5a7IjjrUn iiKjfZDADIQCiLLki/46BLB+xdKDZXkK/SHM0aItOxihkQftKAlojOzhAekOey2A 46mPkGWBXCZh1hkgJFDjC1mIAjyQSottxaMfK/R4Qfmu0dRqNCK8MWy3xhOIgygd hJcgLcA+F/ulc0jLkHUNS5QOLGW6hh9bRM0Ase5tHfYTqvpmqOc156xYbyLZ2s+u gmLNtAJ98hjcl+yoo/v6P6dgSGJ5KDl4WAQCVa/l3Nob0VOIOYxbs1ZJfvsWRsx3 dsdDX1+Gzmrv7clucPhGLQdaKmUutTtPN4gD1qw1V2dkHU+F8HvzdA6BvgwI+FCl 3mN3KYOhUXKnbGPiv9AQ31+ch2ZiexIsmE5ZL4W9H5tQyraj8Ocu2cF0+3rFBqPC 0DuDB3ef6BQIHmWetNnlRByoHeGYMr0KQ8FH5qynpWT8P8RQeQjoyrkW1GKOvzOg Js3UZoKymVVIlojMYetprk8l+gYJE2rp1sj1qWb5UWw8aB7PHje+CIlTqh9rPC2y ybIr83EDLFZ2EeaAcJ5/1Ju4P0S/RYylLfH4+vUZfVVrhVL575fPAL+lFguhLWDj l+HIrg1Vpo5XMw== =WEzf -----END PGP SIGNATURE-----