[CLSA-2026:1788372484] espeak-ng: Fix of CVE-2023-49994
Type:
security
Severity:
Moderate
Release date:
2026-09-02 18:08:14 UTC
Description:
- CVE-2023-49994: initialize x and guard a NULL pitch_env in AdvanceParameters, and clamp wdata.pitch to the 25 Hz minimum at the start of WavegenFill2, preventing a divide-by-zero in PeaksToHarmspect
CVEs fixed:
Updated packages:
  • espeak-ng-1.50-9.el9_6.tuxcare.els1.i686.rpm
    sha:a2a38cbd7c873807c301efe4ce83ddf6291db27af6defb7bff447234314921c2
  • espeak-ng-1.50-9.el9_6.tuxcare.els1.x86_64.rpm
    sha:89eaa279ccc972d22a9ffcccde4998f25dbadbe0df183ac2d55c6c0bcb72286f
  • espeak-ng-devel-1.50-9.el9_6.tuxcare.els1.i686.rpm
    sha:97f507eaadefca4e9e267050d8f4d4358b09f885e1c0090794cd062d5f2d83e3
  • espeak-ng-devel-1.50-9.el9_6.tuxcare.els1.x86_64.rpm
    sha:a890924ebe273c198e84776794f3e4a6733e8469a307e80bb0f5c26ac9bfe343
  • espeak-ng-doc-1.50-9.el9_6.tuxcare.els1.noarch.rpm
    sha:ab76d878e9cf10cc82476e04eb4dfe948f23773e70ff31e29d3d8c48d466d3f0
  • espeak-ng-vim-1.50-9.el9_6.tuxcare.els1.noarch.rpm
    sha:b5a00e4ce3b4075aaae608ec394737dd9cb7fed90c6a24e50ec829beb9f6c067
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.