[El-errata] ELSA-2026-95085 Important: Oracle Linux 10 tesseract security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-95085

http://linux.oracle.com/errata/ELSA-2026-95085.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
tesseract-5.3.4-11.el10_2.x86_64.rpm
tesseract-devel-5.3.4-11.el10_2.x86_64.rpm

aarch64:
tesseract-5.3.4-11.el10_2.aarch64.rpm
tesseract-devel-5.3.4-11.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/tesseract-5.3.4-11.el10_2.src.rpm

Related CVEs:

CVE-2026-88047
CVE-2026-88048
CVE-2026-88049
CVE-2026-88051
CVE-2026-88052
CVE-2026-88053




Description of changes:

[5.3.4-11]
- Fix incomplete CVE-2026-88051: reset 'size_used_' on validation failure
  in 'GenericVector::read()'; check 'fontinfo_table_' and 'fontset_table_'
  read return values in 'ReadIntTemplates'

[5.3.4-10]
- Replace ASSERT_HOST around LSTM model Load with graceful error
  handling; fixes denial-of-service crash (exit 134) when CVE
  validation correctly rejects a malformed LSTM traineddata file

[5.3.4-9]
- CVE-2026-88053: add void-to-bool failure propagation for
  'InitAdaptiveClassifier', 'program_editup', and
  'init_tesseract_internal'; without this, validation fires but the
  process SIGSEGV (exit 139) because the failure never reaches Init

[5.3.4-8]
- Backport fixes for CVE-2026-88047, CVE-2026-88048, CVE-2026-88049,
  CVE-2026-88051, CVE-2026-88052, CVE-2026-88053