ELSA-2026-95085

ELSA-2026-95085 - tesseract security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-11-04

Description

[5.3.4-11]
- Fix incomplete CVE-2026-88051: reset 'size_used_' on validation failure
in 'GenericVector::read()'; check 'fontinfo_table_' and 'fontset_table_'
read return values in 'ReadIntTemplates'

[5.3.4-10]
- Replace ASSERT_HOST around LSTM model Load with graceful error
handling; fixes denial-of-service crash (exit 134) when CVE
validation correctly rejects a malformed LSTM traineddata file

[5.3.4-9]
- CVE-2026-88053: add void-to-bool failure propagation for
'InitAdaptiveClassifier', 'program_editup', and
'init_tesseract_internal'; without this, validation fires but the
process SIGSEGV (exit 139) because the failure never reaches Init

[5.3.4-8]
- Backport fixes for CVE-2026-88047, CVE-2026-88048, CVE-2026-88049,
CVE-2026-88051, CVE-2026-88052, CVE-2026-88053

Related CVEs

CVE-2026-88047

CVE-2026-88048

CVE-2026-88049

CVE-2026-88051

CVE-2026-88052

CVE-2026-88053

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	tesseract-5.3.4-11.el10_2.src.rpm	18f8bcb2239260c7ff50de791047a53be2344ef83d992b111f6d0054bd533ee1	-	ol10_aarch64_appstream
	tesseract-5.3.4-11.el10_2.src.rpm	18f8bcb2239260c7ff50de791047a53be2344ef83d992b111f6d0054bd533ee1	-	ol10_aarch64_codeready_builder
	tesseract-5.3.4-11.el10_2.aarch64.rpm	d76d7ba7c2b23c2d35a7c16836906e0cf61766aff496e27ffbaaf48251703f44	-	ol10_aarch64_appstream
	tesseract-devel-5.3.4-11.el10_2.aarch64.rpm	3ec64ecea0be92438172287e2062741dd9e52c2cdca92b8c16fb039c01bcb391	-	ol10_aarch64_codeready_builder
Oracle Linux 10 (x86_64)	tesseract-5.3.4-11.el10_2.src.rpm	18f8bcb2239260c7ff50de791047a53be2344ef83d992b111f6d0054bd533ee1	-	ol10_x86_64_appstream
	tesseract-5.3.4-11.el10_2.src.rpm	18f8bcb2239260c7ff50de791047a53be2344ef83d992b111f6d0054bd533ee1	-	ol10_x86_64_codeready_builder
	tesseract-5.3.4-11.el10_2.x86_64.rpm	5df74890c4dc980449e8140dc61434ab909567d61d827f3fba9e6bb6735d940b	-	ol10_x86_64_appstream
	tesseract-devel-5.3.4-11.el10_2.x86_64.rpm	505bba9a753bc255f3844642a2e3ba095cc52d5f25d0595d408403d0c2b2f72c	-	ol10_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team