Skip to content
OpenAdvisories
High ELSA-2026-67832 1 CVE

Important: tesseract security update (Oracle Linux 8)

Published Sep 16, 2026 · Updated Sep 16, 2026

Ecosystem: Oracle Linux

Summary

[4.1.1-3]
- Resolves: CVE-2026-73066

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 8 tesseract 0:4.1.1-3.el8_10
Oracle Linux · 8 tesseract-devel 0:4.1.1-3.el8_10

Vulnerabilities 1

  • Medium 6.8
    CVE-2026-73066

    Tesseract: Heap out-of-bounds write in LSTM Convolve layer via crafted .traineddata

    Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesseract's deserializer can cause an unchecked signed integer multiplication in Convolve::DeSerialize in src/lstm/convolve.cpp to wrap the conv…

    tesseract-ocr tesseract tesseract tesseract Debian Ubuntu