[El-errata] ELSA-2026-95086 Important: Oracle Linux 9 tesseract security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-95086

http://linux.oracle.com/errata/ELSA-2026-95086.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
tesseract-4.1.1-11.el9_8.i686.rpm
tesseract-4.1.1-11.el9_8.x86_64.rpm
tesseract-devel-4.1.1-11.el9_8.i686.rpm
tesseract-devel-4.1.1-11.el9_8.x86_64.rpm

aarch64:
tesseract-4.1.1-11.el9_8.aarch64.rpm
tesseract-devel-4.1.1-11.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/tesseract-4.1.1-11.el9_8.src.rpm

Related CVEs:

CVE-2026-88047
CVE-2026-88048
CVE-2026-88049
CVE-2026-88051
CVE-2026-88052
CVE-2026-88053




Description of changes:

[4.1.1-11]
- Fix incomplete CVE-2026-88051: reset 'size_used_' on validation failure
  in 'GenericVector::read()'; check 'fontinfo_table_' and 'fontset_table_'
  read return values in 'ReadIntTemplates'

[4.1.1-10]
- Replace ASSERT_HOST around LSTM model Load with graceful error
  handling; fixes denial-of-service crash (exit 134) when CVE
  validation correctly rejects a malformed LSTM traineddata file

[4.1.1-9]
- Resolves: CVE-2026-88047 CVE-2026-88048 CVE-2026-88049
- Resolves: CVE-2026-88051 CVE-2026-88052 CVE-2026-88053