[Git][security-tracker-team/security-tracker][master] Add new Tesseract issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
441f79c9 by Salvatore Bonaccorso at 2026-10-31T18:11:03+01:00
Add new Tesseract issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -205,13 +205,25 @@ CVE-2026-119343 (Stirling-PDF is a locally hosted web application that facilitat
 CVE-2026-119342 (Stirling-PDF is a locally hosted web application that facilitates vari ...)
 	NOT-FOR-US: Stirling-PDF
 CVE-2026-119341 (Tesseract is an open source OCR engine. Prior to 5.5.4, ReadAdaptedCla ...)
-	TODO: check
+	- tesseract <unfixed>
+	NOTE: https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-357f-833m-3f83
+	NOTE: https://github.com/tesseract-ocr/tesseract/pull/4645
+	NOTE: Fixed by: https://github.com/tesseract-ocr/tesseract/commit/614e971036d2b95d521057ff63d68d6612429b23 (5.5.4)
 CVE-2026-119340 (Tesseract is an open source OCR engine. Prior to 5.5.4, GENERIC_2D_ARR ...)
-	TODO: check
+	- tesseract <unfixed>
+	NOTE: https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-6xhq-wvww-6xfg
+	NOTE: https://github.com/tesseract-ocr/tesseract/pull/4649
+	NOTE: Fixed by: https://github.com/tesseract-ocr/tesseract/commit/048e92378f1a34dcdaf94bc515c7552ac01f08ef (5.5.4)
 CVE-2026-119339 (Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix:: ...)
-	TODO: check
+	- tesseract <unfixed>
+	NOTE: https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-h9g4-frjx-6cj3
+	NOTE: https://github.com/tesseract-ocr/tesseract/pull/4657
+	NOTE: Fixed by: https://github.com/tesseract-ocr/tesseract/commit/c053424327352b9d5180aa7540c1f9e67c64f27e (5.5.4)
 CVE-2026-119338 (Tesseract is an open source OCR engine. From 5.4.0 until 5.5.4, Append ...)
-	TODO: check
+	- tesseract <unfixed>
+	NOTE: https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-vf7v-2h4f-6f4j
+	NOTE: https://github.com/tesseract-ocr/tesseract/pull/4647
+	NOTE: Fixed by: https://github.com/tesseract-ocr/tesseract/commit/fa52414ff1fd13ae4b00048d2498f9141b0bc2eb (5.5.4)
 CVE-2026-119337 (RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. ...)
 	NOT-FOR-US: RAGFlow
 CVE-2026-119336 (Pi-hole is a DNS sinkhole that protects devices from unwanted content  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/441f79c9d7251774a24c45d77ed7978ffeb1413b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/441f79c9d7251774a24c45d77ed7978ffeb1413b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261031/0be40589/attachment.htm>