ELSA-2026-95725

ELSA-2026-95725 - tesseract security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-11-05

Description

[4.1.1-7]
- Rebuilt for mtime issue

[4.1.1-6]
- Fix incomplete CVE-2026-88051: reset 'size_used_' on validation failure
in 'GenericVector::read()'; check 'fontinfo_table_' and 'fontset_table_'
read return values in 'ReadIntTemplates'; fix callback leak on all early
return paths in 'GenericVector::read()' (4.1.1-specific)

[4.1.1-5]
- Replace ASSERT_HOST around LSTM model Load with graceful error
handling; fixes denial-of-service crash (exit 134) when CVE
validation correctly rejects a malformed LSTM traineddata file

[4.1.1-4]
- Resolves: CVE-2026-88047 CVE-2026-88048 CVE-2026-88049
- Resolves: CVE-2026-88051 CVE-2026-88052 CVE-2026-88053

Related CVEs

CVE-2026-88047

CVE-2026-88048

CVE-2026-88049

CVE-2026-88051

CVE-2026-88052

CVE-2026-88053

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	tesseract-4.1.1-7.el8_10.src.rpm	589e8b7777a47b1f458e4f89de9cc14a8fbe3780521891c90515a5025885c54d	-	ol8_aarch64_appstream
	tesseract-4.1.1-7.el8_10.src.rpm	589e8b7777a47b1f458e4f89de9cc14a8fbe3780521891c90515a5025885c54d	-	ol8_aarch64_codeready_builder
	tesseract-4.1.1-7.el8_10.aarch64.rpm	a12d7cff706a3a5cb7cee7c8ce75798afb64c031fd21dc939cff4ca886b55cdb	-	ol8_aarch64_appstream
	tesseract-devel-4.1.1-7.el8_10.aarch64.rpm	39440d972b6dd24dc6b9d80b92db80313033b45c4317ba63a41156d9995f00cf	-	ol8_aarch64_codeready_builder
Oracle Linux 8 (x86_64)	tesseract-4.1.1-7.el8_10.src.rpm	589e8b7777a47b1f458e4f89de9cc14a8fbe3780521891c90515a5025885c54d	-	ol8_x86_64_appstream
	tesseract-4.1.1-7.el8_10.src.rpm	589e8b7777a47b1f458e4f89de9cc14a8fbe3780521891c90515a5025885c54d	-	ol8_x86_64_codeready_builder
	tesseract-4.1.1-7.el8_10.i686.rpm	b57cb37c2f81f2a3ef6369dc32b11323653473cea92e78af039e21a9c8965594	-	ol8_x86_64_appstream
	tesseract-4.1.1-7.el8_10.x86_64.rpm	435fb6d4b5bb4922bcd3d197faec6de5d7db854dfe65a1358f559b5958b623da	-	ol8_x86_64_appstream
	tesseract-devel-4.1.1-7.el8_10.i686.rpm	e66e84c4ce08cf5b7c68992feff843137f82e329f16b8bb93e5eee8abea17b26	-	ol8_x86_64_codeready_builder
	tesseract-devel-4.1.1-7.el8_10.x86_64.rpm	7a34a4f451a02ab383a6113d6c8546ea2afd8b5f40d1c1a4122af7614ffebeff	-	ol8_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team