[ALSA-2026:95725] Important: tesseract security update
Type:
security
Severity:
important
Release date:
2026-11-06
Description:
A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005. Security Fix(es): * tesseract: Tesseract: Heap out-of-bounds write/read leading to information disclosure via crafted data (CVE-2026-88048) * tesseract: Tesseract: Stack buffer overflow via crafted .traineddata file (CVE-2026-88047) * tesseract: Tesseract: Heap out-of-bounds write allows arbitrary code execution or denial of service (CVE-2026-88049) * tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata model (CVE-2026-88051) * tesseract: Tesseract: Heap out-of-bounds write leads to heap corruption via crafted data file (CVE-2026-88053) * tesseract: Tesseract: Heap out-of-bounds write can lead to arbitrary code execution (CVE-2026-88052) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 tesseract-4.1.1-7.el8_10.aarch64.rpm 651eea867a6bf5a0820adf1ab199245106230746f2f5ed5ab2cb7162d3dc5b34
aarch64 tesseract-devel-4.1.1-7.el8_10.aarch64.rpm e0cfdc72de0523e3d5ef79715877270e1752d7eb31343bb2e46d2a6e92517880
i686 tesseract-4.1.1-7.el8_10.i686.rpm e33313cbc36340d7a411b88334a928a56487a275a117aca5939545f78cd0c8cb
i686 tesseract-devel-4.1.1-7.el8_10.i686.rpm e78b979146cc74e6a1aa082a14a758186c26dec4b2d4c7112829d39676fe769c
ppc64le tesseract-4.1.1-7.el8_10.ppc64le.rpm 31f50f8bd4272d558a42338976a6faeab79bfdbc9ec176eeb199e78a7dd2f570
ppc64le tesseract-devel-4.1.1-7.el8_10.ppc64le.rpm 858463b0e5a832f7c869ff8a583b2c292341458510246cdb32f36e372ff82010
s390x tesseract-4.1.1-7.el8_10.s390x.rpm 22b02670a075ee7c0ff5a1008a4506981c8dc547c36a2b17b63f923464cf6581
s390x tesseract-devel-4.1.1-7.el8_10.s390x.rpm 6557bed46ebb666d15a6d0c86536bdcba963f03cfaa25793686f82f078e29fd8
x86_64 tesseract-devel-4.1.1-7.el8_10.x86_64.rpm 17ac91b4b66bcd35b70db8fe8308a28434d1bed48cc53ac276b377c1edb6aedf
x86_64 tesseract-4.1.1-7.el8_10.x86_64.rpm 61f960ab96ecaabe06276e41c73e349a6e0dbd729b43ec96991a3c8c73da9108
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.