4 changed files with 75 additions and 53 deletions
--- a/.espeak-ng.metadata
+++ b/.espeak-ng.metadata
@ -1 +1,2 @@
-6989535ba70abef7fccdddc829891ed03ef8c801 SOURCES/1.50.tar.gz
+4aa18b44a6a1e9214bf7a0fba3bbe2ae9d88e236 SOURCES/espeak-ng-1.51-CVE-2023-49990-4.patch
+d4237b3257ce5430d6dc72e1223306ac4d771a5b SOURCES/espeak-ng-1.51.1.tar.gz
--- a/.gitignore
+++ b/.gitignore
@ -1 +1,2 @@
-SOURCES/1.50.tar.gz
+SOURCES/espeak-ng-1.51-CVE-2023-49990-4.patch
+SOURCES/espeak-ng-1.51.1.tar.gz
--- a/SOURCES/0001-fix-699-avoid-samplerate-clashing-with-LTO-in-gcc-10.patch
+++ b/SOURCES/0001-fix-699-avoid-samplerate-clashing-with-LTO-in-gcc-10.patch
@ -1,25 +0,0 @@
-From e11cd42b03d1628f7a0cf45c9406123282e25c63 Mon Sep 17 00:00:00 2001
-From: "Reece H. Dunn" <msclrhd@gmail.com>
-Date: Thu, 9 Jan 2020 21:11:42 +0000
-Subject: [PATCH] fix #699: avoid samplerate clashing with LTO in gcc 10.
-
---
- src/espeak-ng.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/src/espeak-ng.c b/src/espeak-ng.c
-index 10b8a887..3a7838cf 100644
--- a/src/espeak-ng.c
-+++ b/src/espeak-ng.c
-@@ -117,7 +117,7 @@ static const char *help_text =
-     "--load     Load voice from a file in current directory by name.\n"
-     "-h, --help Show this help.\n";
- 
-int samplerate;
-+static int samplerate;
- bool quiet = false;
- unsigned int samples_total = 0;
- unsigned int samples_split = 0;
-- 
-2.20.1
-
--- a/SPECS/espeak-ng.spec
+++ b/SPECS/espeak-ng.spec
@ -1,17 +1,25 @@
-Name:           espeak-ng
-Version:        1.50
-Release:        9%{?dist}
-Summary:        eSpeak NG Text-to-Speech
-
-License:        GPLv3+
-URL:            https://github.com/espeak-ng/espeak-ng
-Source0:        %{url}/archive/%{version}.tar.gz
-
-BuildRequires:  gcc make autoconf automake libtool pkgconfig
-BuildRequires:  rubygem-ronn rubygem-kramdown
-BuildRequires:  pcaudiolib-devel
-
-Patch0:         0001-fix-699-avoid-samplerate-clashing-with-LTO-in-gcc-10.patch
+Name:          espeak-ng
+Version:       1.51.1
+Release:       9%{?dist}
+Summary:       eSpeak NG Text-to-Speech
+
+License:       GPL-3.0-only AND GPL-3.0-or-later AND Apache-2.0 AND BSD-2-Clause AND Unicode-DFS-2016 AND CC-BY-SA-3.0
+URL:           https://github.com/espeak-ng/espeak-ng
+Source0:       %{url}/archive/%{version}/%{name}-%{version}.tar.gz
+
+BuildRequires: gcc-g++
+BuildRequires: make
+BuildRequires: autoconf
+BuildRequires: automake
+BuildRequires: libtool
+BuildRequires: pkgconfig
+BuildRequires: rubygem-ronn
+BuildRequires: rubygem-kramdown
+BuildRequires: pcaudiolib-devel
+
+# Backported from:
+# https://github.com/espeak-ng/espeak-ng/commit/58f1e0b6a4e6aa55621c6f01118994d01fd6f68c
+Patch0:        espeak-ng-1.51-CVE-2023-49990-4.patch

 %description
 The eSpeak NG (Next Generation) Text-to-Speech program is an open source speech
@ -74,7 +82,9 @@ ESPEAK_DATA_PATH=`pwd` LD_LIBRARY_PATH=src:${LD_LIBRARY_PATH} src/espeak-ng ...

 %files
 %license COPYING
-%license COPYING.IEEE
+%license COPYING.APACHE
+%license COPYING.BSD2
+%license COPYING.UCD
 %doc README.md
 %doc CHANGELOG.md
 %{_bindir}/speak-ng
@ -99,20 +109,55 @@ ESPEAK_DATA_PATH=`pwd` LD_LIBRARY_PATH=src:${LD_LIBRARY_PATH} src/espeak-ng ...
 %doc docs/*.html

 %changelog
-* Tue Jun 20 2023 Tomas Korbar <tkorbar@redhat.com> - 1.50-9
- Fix gating.yaml
- Related: rhbz#2190221
+* Tue Nov 26 2024 MSVSphere Packaging Team <packager@msvsphere-os.ru> - 1.51.1-9
+- Rebuilt for MSVSphere 10
+
+* Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com> - 1.51.1-9
+- Bump release for June 2024 mass rebuild
+
+* Wed Jan 24 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.51.1-8
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
+
+* Fri Jan 19 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.51.1-7
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
+
+* Wed Jan  3 2024 Jaroslav Škarvada <jskarvad@redhat.com> - 1.51.1-6
+- Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c
+  Resolves: CVE-2023-49990
+- Fixed buffer underflow in CountVowelPosition function at synthdata.c
+  Resolves: CVE-2023-49991
+- Fixed buffer overflow in RemoveEnding at dictionary.c
+  Resolves: CVE-2023-49992
+- Fixed buffer overflow in ReadClause function at readclause.c
+  Resolves: CVE-2023-49993
+- Fixed floating point exception in PeaksToHarmspect at wavegen.c
+  Resolves: CVE-2023-49994

-* Tue Jun 20 2023 Tomas Korbar <tkorbar@redhat.com> - 1.50-8
- Rebuild for rhbz#2190221
- Resolves: rhbz#2190221
+* Tue Jan 02 2024 Tomas Korbar <tkorbar@redhat.com> - 1.51.1-5
+- Change license tag so it fully conforms to SPDX
+
+* Wed Jul 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1.51.1-4
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
+
+* Thu Jan 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1.51.1-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
+
+* Thu Jul 21 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1.51.1-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
+
+* Thu Jun 23 2022 Jaroslav Škarvada <jskarvad@redhat.com> - 1.51.1-1
+- New version
+  Resolves: rhbz#2100020
+
+* Thu Apr  7 2022 Jaroslav Škarvada <jskarvad@redhat.com> - 1.51-1
+- New version
+  Resolves: rhbz#2071446

-* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 1.50-7
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
-  Related: rhbz#1991688
+* Thu Jan 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1.50-7
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

-* Thu Apr 15 2021 Mohan Boddu <mboddu@redhat.com> - 1.50-6
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
+* Wed Jul 21 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1.50-6
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

 * Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1.50-5
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild