Red Hat Product Errata RHSA-2026:71566 - Security Advisory
Issued:
2026-09-24
Updated:
2026-09-24

RHSA-2026:71566 - Security Advisory

Synopsis

Important: tesseract security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for tesseract is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005.

Security Fix(es):

  • tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata (CVE-2026-73066)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x
  • Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le
  • Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64

Fixes

  • BZ - 2514011 - CVE-2026-73066 tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata

Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0

SRPM
tesseract-5.3.4-6.el10_0.1.src.rpm SHA-256: 8be712497af310070ff1aabe67326d9c627151aca5ec3a0048410757e2c90e42
x86_64
tesseract-5.3.4-6.el10_0.1.x86_64.rpm SHA-256: 9d744e629fe9383e386caa9ab06ee5d566c0a23b8040ba30e1c8fd92e33bccf8
tesseract-debuginfo-5.3.4-6.el10_0.1.x86_64.rpm SHA-256: a0fc41a5f12ffa6c7abb20d8decf17fbdd21723007872b8ebe36eea286d77cab
tesseract-debugsource-5.3.4-6.el10_0.1.x86_64.rpm SHA-256: f05fc2c87d953ef4ae8e3d90fda050e28bf9f71245843b81403fed95751e9be7
tesseract-tools-debuginfo-5.3.4-6.el10_0.1.x86_64.rpm SHA-256: 435319e511fb16efa4839e457b4ebaec7ec1e52a8158d337d080d353a3d68013

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0

SRPM
tesseract-5.3.4-6.el10_0.1.src.rpm SHA-256: 8be712497af310070ff1aabe67326d9c627151aca5ec3a0048410757e2c90e42
s390x
tesseract-5.3.4-6.el10_0.1.s390x.rpm SHA-256: 9719cd9120278e8f96b497cfca412789d9ee83faf8a7ad843ea11c4c8d10f292
tesseract-debuginfo-5.3.4-6.el10_0.1.s390x.rpm SHA-256: 8060aef9ebd9c0c4f942a92cfca1479dddd022321f711fae84be0527c9210b96
tesseract-debugsource-5.3.4-6.el10_0.1.s390x.rpm SHA-256: 062f2a213f03281466fdaac8ebaa8a1a319eefc7852809639a8c5cffba4c81ab
tesseract-tools-debuginfo-5.3.4-6.el10_0.1.s390x.rpm SHA-256: df2339cbd7c364eba79cbbcdeb55f8673bf0edf43771e07f0110f0f63605a17f

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0

SRPM
tesseract-5.3.4-6.el10_0.1.src.rpm SHA-256: 8be712497af310070ff1aabe67326d9c627151aca5ec3a0048410757e2c90e42
ppc64le
tesseract-5.3.4-6.el10_0.1.ppc64le.rpm SHA-256: 6b6ae3e6236b4fab90dc1b67a16e6f345e46bc363bed6ba280f5416d4f77ad9c
tesseract-debuginfo-5.3.4-6.el10_0.1.ppc64le.rpm SHA-256: eee2db679e2eb31bae76cf21c4a7b98654919baf29336c89e555b12730355e7f
tesseract-debugsource-5.3.4-6.el10_0.1.ppc64le.rpm SHA-256: 984a0b1afd58e687e52fbe973ee6ca09cad96cc4ff023076f09f328716307fdf
tesseract-tools-debuginfo-5.3.4-6.el10_0.1.ppc64le.rpm SHA-256: fab95eb91c50da5fa0b2f6162141f1786d816cb9d5d62d8bb034bd41d86fb936

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0

SRPM
tesseract-5.3.4-6.el10_0.1.src.rpm SHA-256: 8be712497af310070ff1aabe67326d9c627151aca5ec3a0048410757e2c90e42
aarch64
tesseract-5.3.4-6.el10_0.1.aarch64.rpm SHA-256: 09e929da2213cdf872d031fc819579b023e27c78e7377ce27b2a097bfa267a64
tesseract-debuginfo-5.3.4-6.el10_0.1.aarch64.rpm SHA-256: 560769238d1d015ab46f9c904195ec92e5de20ebf16619d6ade66a9c7bea9e7d
tesseract-debugsource-5.3.4-6.el10_0.1.aarch64.rpm SHA-256: a14a9c59348643b5324476be4fb90d434a215cf2ac841d1c8343447fc75857c2
tesseract-tools-debuginfo-5.3.4-6.el10_0.1.aarch64.rpm SHA-256: 5217601bd7aa1189d02a851f5e01f2d50995b6a5eab4cd94c707eb13ea4393c6

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0

SRPM
x86_64
tesseract-debuginfo-5.3.4-6.el10_0.1.x86_64.rpm SHA-256: a0fc41a5f12ffa6c7abb20d8decf17fbdd21723007872b8ebe36eea286d77cab
tesseract-debugsource-5.3.4-6.el10_0.1.x86_64.rpm SHA-256: f05fc2c87d953ef4ae8e3d90fda050e28bf9f71245843b81403fed95751e9be7
tesseract-devel-5.3.4-6.el10_0.1.x86_64.rpm SHA-256: 6139cd5f468e0fa17b626335cc4057306233dd21cc71ffb9c1b2fa55e5708327
tesseract-tools-debuginfo-5.3.4-6.el10_0.1.x86_64.rpm SHA-256: 435319e511fb16efa4839e457b4ebaec7ec1e52a8158d337d080d353a3d68013

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0

SRPM
ppc64le
tesseract-debuginfo-5.3.4-6.el10_0.1.ppc64le.rpm SHA-256: eee2db679e2eb31bae76cf21c4a7b98654919baf29336c89e555b12730355e7f
tesseract-debugsource-5.3.4-6.el10_0.1.ppc64le.rpm SHA-256: 984a0b1afd58e687e52fbe973ee6ca09cad96cc4ff023076f09f328716307fdf
tesseract-devel-5.3.4-6.el10_0.1.ppc64le.rpm SHA-256: 71c2f338fe43b75024d0220f3c0e8e028f1fd35598b3a775337aea8482954039
tesseract-tools-debuginfo-5.3.4-6.el10_0.1.ppc64le.rpm SHA-256: fab95eb91c50da5fa0b2f6162141f1786d816cb9d5d62d8bb034bd41d86fb936

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0

SRPM
s390x
tesseract-debuginfo-5.3.4-6.el10_0.1.s390x.rpm SHA-256: 8060aef9ebd9c0c4f942a92cfca1479dddd022321f711fae84be0527c9210b96
tesseract-debugsource-5.3.4-6.el10_0.1.s390x.rpm SHA-256: 062f2a213f03281466fdaac8ebaa8a1a319eefc7852809639a8c5cffba4c81ab
tesseract-devel-5.3.4-6.el10_0.1.s390x.rpm SHA-256: fbcac52b68504f0764ff7a56ad3dcd3d238517b687da0c9ffcc23154ed3f0535
tesseract-tools-debuginfo-5.3.4-6.el10_0.1.s390x.rpm SHA-256: df2339cbd7c364eba79cbbcdeb55f8673bf0edf43771e07f0110f0f63605a17f

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0

SRPM
aarch64
tesseract-debuginfo-5.3.4-6.el10_0.1.aarch64.rpm SHA-256: 560769238d1d015ab46f9c904195ec92e5de20ebf16619d6ade66a9c7bea9e7d
tesseract-debugsource-5.3.4-6.el10_0.1.aarch64.rpm SHA-256: a14a9c59348643b5324476be4fb90d434a215cf2ac841d1c8343447fc75857c2
tesseract-devel-5.3.4-6.el10_0.1.aarch64.rpm SHA-256: d3334c9a7c92825c137ab1753154e53344fc7bbbbb348ccf0784ded8b9038462
tesseract-tools-debuginfo-5.3.4-6.el10_0.1.aarch64.rpm SHA-256: 5217601bd7aa1189d02a851f5e01f2d50995b6a5eab4cd94c707eb13ea4393c6

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0

SRPM
tesseract-5.3.4-6.el10_0.1.src.rpm SHA-256: 8be712497af310070ff1aabe67326d9c627151aca5ec3a0048410757e2c90e42
aarch64
tesseract-5.3.4-6.el10_0.1.aarch64.rpm SHA-256: 09e929da2213cdf872d031fc819579b023e27c78e7377ce27b2a097bfa267a64
tesseract-debuginfo-5.3.4-6.el10_0.1.aarch64.rpm SHA-256: 560769238d1d015ab46f9c904195ec92e5de20ebf16619d6ade66a9c7bea9e7d
tesseract-debugsource-5.3.4-6.el10_0.1.aarch64.rpm SHA-256: a14a9c59348643b5324476be4fb90d434a215cf2ac841d1c8343447fc75857c2
tesseract-tools-debuginfo-5.3.4-6.el10_0.1.aarch64.rpm SHA-256: 5217601bd7aa1189d02a851f5e01f2d50995b6a5eab4cd94c707eb13ea4393c6

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0

SRPM
tesseract-5.3.4-6.el10_0.1.src.rpm SHA-256: 8be712497af310070ff1aabe67326d9c627151aca5ec3a0048410757e2c90e42
s390x
tesseract-5.3.4-6.el10_0.1.s390x.rpm SHA-256: 9719cd9120278e8f96b497cfca412789d9ee83faf8a7ad843ea11c4c8d10f292
tesseract-debuginfo-5.3.4-6.el10_0.1.s390x.rpm SHA-256: 8060aef9ebd9c0c4f942a92cfca1479dddd022321f711fae84be0527c9210b96
tesseract-debugsource-5.3.4-6.el10_0.1.s390x.rpm SHA-256: 062f2a213f03281466fdaac8ebaa8a1a319eefc7852809639a8c5cffba4c81ab
tesseract-tools-debuginfo-5.3.4-6.el10_0.1.s390x.rpm SHA-256: df2339cbd7c364eba79cbbcdeb55f8673bf0edf43771e07f0110f0f63605a17f

Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0

SRPM
tesseract-5.3.4-6.el10_0.1.src.rpm SHA-256: 8be712497af310070ff1aabe67326d9c627151aca5ec3a0048410757e2c90e42
ppc64le
tesseract-5.3.4-6.el10_0.1.ppc64le.rpm SHA-256: 6b6ae3e6236b4fab90dc1b67a16e6f345e46bc363bed6ba280f5416d4f77ad9c
tesseract-debuginfo-5.3.4-6.el10_0.1.ppc64le.rpm SHA-256: eee2db679e2eb31bae76cf21c4a7b98654919baf29336c89e555b12730355e7f
tesseract-debugsource-5.3.4-6.el10_0.1.ppc64le.rpm SHA-256: 984a0b1afd58e687e52fbe973ee6ca09cad96cc4ff023076f09f328716307fdf
tesseract-tools-debuginfo-5.3.4-6.el10_0.1.ppc64le.rpm SHA-256: fab95eb91c50da5fa0b2f6162141f1786d816cb9d5d62d8bb034bd41d86fb936

Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0

SRPM
tesseract-5.3.4-6.el10_0.1.src.rpm SHA-256: 8be712497af310070ff1aabe67326d9c627151aca5ec3a0048410757e2c90e42
x86_64
tesseract-5.3.4-6.el10_0.1.x86_64.rpm SHA-256: 9d744e629fe9383e386caa9ab06ee5d566c0a23b8040ba30e1c8fd92e33bccf8
tesseract-debuginfo-5.3.4-6.el10_0.1.x86_64.rpm SHA-256: a0fc41a5f12ffa6c7abb20d8decf17fbdd21723007872b8ebe36eea286d77cab
tesseract-debugsource-5.3.4-6.el10_0.1.x86_64.rpm SHA-256: f05fc2c87d953ef4ae8e3d90fda050e28bf9f71245843b81403fed95751e9be7
tesseract-tools-debuginfo-5.3.4-6.el10_0.1.x86_64.rpm SHA-256: 435319e511fb16efa4839e457b4ebaec7ec1e52a8158d337d080d353a3d68013

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.