[Git][security-tracker-team/security-tracker][master] Two new Tesseract issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bddf0c8c by Salvatore Bonaccorso at 2026-08-11T22:28:35+02:00
Two new Tesseract issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -150,9 +150,16 @@ CVE-2026-73069 (Twenty is an open-source CRM (customer relationship management)
 CVE-2026-73068 (ToolJet is the open-source foundation am AI-native platform for buildi ...)
 	TODO: check
 CVE-2026-73067 (Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .tra ...)
-	TODO: check
+	- tesseract <unfixed>
+	NOTE: https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-x3vq-7rr7-5x3h
+	NOTE: https://github.com/tesseract-ocr/tesseract/pull/4581
+	NOTE: Fixed by: https://github.com/tesseract-ocr/tesseract/commit/55287a94b8044c05ce3fd10f5aca6ebbd238e518 (5.5.3)
+	NOTE: Fixed by: https://github.com/tesseract-ocr/tesseract/commit/82727cc11c34eaf1249af002d69f6bbae70993b9 (5.5.3)
 CVE-2026-73066 (Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .tra ...)
-	TODO: check
+	- tesseract <unfixed>
+	NOTE: https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-7j76-5rq5-5jg8
+	NOTE: https://github.com/tesseract-ocr/tesseract/pull/4588
+	NOTE: Fixed by: https://github.com/tesseract-ocr/tesseract/commit/2f4d2f4bf45c363785d7bf1da29b6628f8939a72 (5.5.3)
 CVE-2026-72971 (Improper link resolution before file access ('link following') in Wind ...)
 	NOT-FOR-US: Microsoft
 CVE-2026-72925 (SWC is a TypeScript / JavaScript compiler written in Rust. Prior to @s ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bddf0c8c9c312e8c0904cd58fb654cc18cb3d1c5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bddf0c8c9c312e8c0904cd58fb654cc18cb3d1c5
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260811/f47b7589/attachment.htm>