ELSA-2026-95086

ELSA-2026-95086 - tesseract security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-11-04

Description

[4.1.1-11]
- Fix incomplete CVE-2026-88051: reset 'size_used_' on validation failure
in 'GenericVector::read()'; check 'fontinfo_table_' and 'fontset_table_'
read return values in 'ReadIntTemplates'

[4.1.1-10]
- Replace ASSERT_HOST around LSTM model Load with graceful error
handling; fixes denial-of-service crash (exit 134) when CVE
validation correctly rejects a malformed LSTM traineddata file

[4.1.1-9]
- Resolves: CVE-2026-88047 CVE-2026-88048 CVE-2026-88049
- Resolves: CVE-2026-88051 CVE-2026-88052 CVE-2026-88053

Related CVEs

CVE-2026-88047

CVE-2026-88048

CVE-2026-88049

CVE-2026-88051

CVE-2026-88052

CVE-2026-88053

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	tesseract-4.1.1-11.el9_8.src.rpm	8d70e7eef5417ecefa77ebfdcfdc7ab2c59b2748c12e4a4746d49f376950d716	-	ol9_aarch64_appstream
	tesseract-4.1.1-11.el9_8.src.rpm	8d70e7eef5417ecefa77ebfdcfdc7ab2c59b2748c12e4a4746d49f376950d716	-	ol9_aarch64_codeready_builder
	tesseract-4.1.1-11.el9_8.aarch64.rpm	f993787deec5059b16a8cca99a969a7174e2a406f314270e59476bfc47dec35c	-	ol9_aarch64_appstream
	tesseract-devel-4.1.1-11.el9_8.aarch64.rpm	7992966cba6fb38ed09f6cef5aec5c7149df8c8c29d5e16963298fc779eb3d3a	-	ol9_aarch64_codeready_builder
Oracle Linux 9 (x86_64)	tesseract-4.1.1-11.el9_8.src.rpm	8d70e7eef5417ecefa77ebfdcfdc7ab2c59b2748c12e4a4746d49f376950d716	-	ol9_x86_64_appstream
	tesseract-4.1.1-11.el9_8.src.rpm	8d70e7eef5417ecefa77ebfdcfdc7ab2c59b2748c12e4a4746d49f376950d716	-	ol9_x86_64_codeready_builder
	tesseract-4.1.1-11.el9_8.i686.rpm	a6f8f1281e5bd3c4c5f3631207f4c7e7d2a5e8aed0e619f44333d65ca2e6a5c0	-	ol9_x86_64_appstream
	tesseract-4.1.1-11.el9_8.x86_64.rpm	ce55d9a6f80872673e10fc26e7358add3761702fbae3faf730cda361071c1bfc	-	ol9_x86_64_appstream
	tesseract-devel-4.1.1-11.el9_8.i686.rpm	7c8e7582fdec8209e65a89e25778aefebd3401b2a8c4bde763033dced1b1546e	-	ol9_x86_64_codeready_builder
	tesseract-devel-4.1.1-11.el9_8.x86_64.rpm	1f2491775c5059757993f1227dd57cce9424ecf213e3da0290c9c22f1478185f	-	ol9_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team