[ALSA-2026:95085] Important: tesseract security update
Type:
security
Severity:
important
Release date:
2026-11-04
Description:
A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005. Security Fix(es): * tesseract: Tesseract: Heap out-of-bounds write/read leading to information disclosure via crafted data (CVE-2026-88048) * tesseract: Tesseract: Stack buffer overflow via crafted .traineddata file (CVE-2026-88047) * tesseract: Tesseract: Heap out-of-bounds write allows arbitrary code execution or denial of service (CVE-2026-88049) * tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata model (CVE-2026-88051) * tesseract: Tesseract: Heap out-of-bounds write leads to heap corruption via crafted data file (CVE-2026-88053) * tesseract: Tesseract: Heap out-of-bounds write can lead to arbitrary code execution (CVE-2026-88052) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 tesseract-5.3.4-11.el10_2.aarch64.rpm 21750777e35f6587e1e05205f58d72b40f2cefc79563672cb5cc1bc5a295cce1
aarch64 tesseract-devel-5.3.4-11.el10_2.aarch64.rpm 8a5892e05b75afa397ab25ecc1adda0da65004c8f6d862dd37b86bc70bb82148
ppc64le tesseract-5.3.4-11.el10_2.ppc64le.rpm 3b4cf87dac0586cd3723967a21cb6a3af5db8be5c67fd5658863f0c8d2266800
ppc64le tesseract-devel-5.3.4-11.el10_2.ppc64le.rpm eb15fede76b57cbbdcf9c0e460f7a63a68811c8f650d9ff2786a913a296356f9
s390x tesseract-5.3.4-11.el10_2.s390x.rpm 6231fa188fb818e41da3756702f672ff48a18319e8a82fd3565d921d3aec0a7e
s390x tesseract-devel-5.3.4-11.el10_2.s390x.rpm ff7df774189db9e972d0491e0a8c00b0b8527569eabac3ee19e89f37c36f7e4e
x86_64 tesseract-devel-5.3.4-11.el10_2.x86_64.rpm 34c9c0b73526e48af33602b3bfb77d04db639840bb577b315f2fefe8b81ee909
x86_64 tesseract-5.3.4-11.el10_2.x86_64.rpm 86fcd10fa03235ca9e3bb9e46fbad41efffa043bf109ba83f3d2b0c49f318693
x86_64_v2 tesseract-5.3.4-11.el10_2.x86_64_v2.rpm 31095c9524dce5b38587905e660f73921acaea7986362906b82eb9d3e3c13796
x86_64_v2 tesseract-devel-5.3.4-11.el10_2.x86_64_v2.rpm 8ddce4c556c7f9df8465e7d82ec9e1a26413a15ae754085f1a73e1a0e6ae5fec
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.