Debian alert DLA-4198-1 (espeak-ng)

From:
             
 
Thorsten Alteholz <debian@alteholz.de>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 4198-1] espeak-ng security update
Date:
             
 
Sat, 31 May 2025 08:33:20 +0000
Message-ID:
             
 
<7c49f99-3c-da54-bbe5-e8b018547abf@alteholz.de>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4198-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                    Thorsten Alteholz
May 31, 2025                                  https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : espeak-ng
Version        : 1.50+dfsg-7+deb11u2
CVE ID         : CVE-2023-49990 CVE-2023-49991 CVE-2023-49992
                  CVE-2023-49993 CVE-2023-49994


Several issues have been found in espeak-ng, a Multi-lingual software 
speech synthesizer.
The issues are related to buffer overflow or underflow in several 
functions and a floating point exception.


For Debian 11 bullseye, these problems have been fixed in version
1.50+dfsg-7+deb11u2.

We recommend that you upgrade your espeak-ng packages.

For the detailed security status of espeak-ng please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/espeak-ng

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequen
-----BEGIN PGP SIGNATURE-----
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=jJUS
-----END PGP SIGNATURE-----