Red Hat Product Errata RHSA-2026:71568 - Security Advisory
Issued:
2026-09-24
Updated:
2026-09-24

RHSA-2026:71568 - Security Advisory

Synopsis

Important: tesseract security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for tesseract is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005.

Security Fix(es):

  • tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata (CVE-2026-73066)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server - AUS 9.4 x86_64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x

Fixes

  • BZ - 2514011 - CVE-2026-73066 tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata

Red Hat Enterprise Linux Server - AUS 9.4

SRPM
tesseract-4.1.1-7.el9_4.1.src.rpm SHA-256: d15fa746ae30e56fd3632c0937aeab0b2cd02ae6c20fcb2ec49b60bd23dfbba3
x86_64
tesseract-4.1.1-7.el9_4.1.i686.rpm SHA-256: 2079939fe0df9a9a7b632a35878c587ad13933465227808e88ea6125bedb291b
tesseract-4.1.1-7.el9_4.1.x86_64.rpm SHA-256: c556cbbfb4f1a810b95a195d5e82202633da7602bfe98dac7c73941731b52653
tesseract-debuginfo-4.1.1-7.el9_4.1.i686.rpm SHA-256: cb3b4bc5ead0036d23aad6d2231c4f51381f573576fcf99b85f57ede4f9d7c10
tesseract-debuginfo-4.1.1-7.el9_4.1.x86_64.rpm SHA-256: 142abdb83a9dcf47f5e01d11d7a6feae79625d1c3ccbaff53e2c35f53eac373f
tesseract-debugsource-4.1.1-7.el9_4.1.i686.rpm SHA-256: e8919f7072927dbb11cb76207aeff174701baebb9ffc9da8f1ab81a28e1e1ac6
tesseract-debugsource-4.1.1-7.el9_4.1.x86_64.rpm SHA-256: 4b07ab5f2305892e9cb8a7d52243218aae1abcd0f9a97a143bbfdfde616c0008
tesseract-tools-debuginfo-4.1.1-7.el9_4.1.i686.rpm SHA-256: d5dc2bd6ce8f85ffc3fc6afc727fa7ea9a6b7756446a638797052f5b20587414
tesseract-tools-debuginfo-4.1.1-7.el9_4.1.x86_64.rpm SHA-256: 435dca952eaa0c9c8e421cd67d54f29a8bd5cbc7acb603369766cddf85de9a9d

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4

SRPM
tesseract-4.1.1-7.el9_4.1.src.rpm SHA-256: d15fa746ae30e56fd3632c0937aeab0b2cd02ae6c20fcb2ec49b60bd23dfbba3
ppc64le
tesseract-4.1.1-7.el9_4.1.ppc64le.rpm SHA-256: 758015bf954597644d96766093017f0b5dc05f9e309c55ee46a1f812d7f2b4d6
tesseract-debuginfo-4.1.1-7.el9_4.1.ppc64le.rpm SHA-256: b3a9b913e654cd03e5b5f38f913aa9a8a47c47b07141cc1b86a34167ead30cd1
tesseract-debugsource-4.1.1-7.el9_4.1.ppc64le.rpm SHA-256: 31acb5da3166d93dd972ce102c00d3165e1e3c98a60a52a5829377558baaf693
tesseract-tools-debuginfo-4.1.1-7.el9_4.1.ppc64le.rpm SHA-256: 9fca8509bae39f592f65a58bb35f8e7c1fedbd2a5d310dacc4521f95a9f46b57

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4

SRPM
tesseract-4.1.1-7.el9_4.1.src.rpm SHA-256: d15fa746ae30e56fd3632c0937aeab0b2cd02ae6c20fcb2ec49b60bd23dfbba3
x86_64
tesseract-4.1.1-7.el9_4.1.i686.rpm SHA-256: 2079939fe0df9a9a7b632a35878c587ad13933465227808e88ea6125bedb291b
tesseract-4.1.1-7.el9_4.1.x86_64.rpm SHA-256: c556cbbfb4f1a810b95a195d5e82202633da7602bfe98dac7c73941731b52653
tesseract-debuginfo-4.1.1-7.el9_4.1.i686.rpm SHA-256: cb3b4bc5ead0036d23aad6d2231c4f51381f573576fcf99b85f57ede4f9d7c10
tesseract-debuginfo-4.1.1-7.el9_4.1.x86_64.rpm SHA-256: 142abdb83a9dcf47f5e01d11d7a6feae79625d1c3ccbaff53e2c35f53eac373f
tesseract-debugsource-4.1.1-7.el9_4.1.i686.rpm SHA-256: e8919f7072927dbb11cb76207aeff174701baebb9ffc9da8f1ab81a28e1e1ac6
tesseract-debugsource-4.1.1-7.el9_4.1.x86_64.rpm SHA-256: 4b07ab5f2305892e9cb8a7d52243218aae1abcd0f9a97a143bbfdfde616c0008
tesseract-tools-debuginfo-4.1.1-7.el9_4.1.i686.rpm SHA-256: d5dc2bd6ce8f85ffc3fc6afc727fa7ea9a6b7756446a638797052f5b20587414
tesseract-tools-debuginfo-4.1.1-7.el9_4.1.x86_64.rpm SHA-256: 435dca952eaa0c9c8e421cd67d54f29a8bd5cbc7acb603369766cddf85de9a9d

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4

SRPM
tesseract-4.1.1-7.el9_4.1.src.rpm SHA-256: d15fa746ae30e56fd3632c0937aeab0b2cd02ae6c20fcb2ec49b60bd23dfbba3
aarch64
tesseract-4.1.1-7.el9_4.1.aarch64.rpm SHA-256: 07653a878ccb21b3c0f649df517880652dbdd2124dee0ce04101f020397c6779
tesseract-debuginfo-4.1.1-7.el9_4.1.aarch64.rpm SHA-256: 18eb4b0129860ee2c5659122e9d45dbdb8471360c402a18647e0d61d0a880360
tesseract-debugsource-4.1.1-7.el9_4.1.aarch64.rpm SHA-256: 4aa7405d0bd17eb5ca976d060fa818dc3f0d052928cd4aab76a6a416e1bcab9d
tesseract-tools-debuginfo-4.1.1-7.el9_4.1.aarch64.rpm SHA-256: f0c85558d9e2c4dee0fa0da7a1263101a7a0b4c22fcf7bef9a3b7ef3e0766497

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4

SRPM
tesseract-4.1.1-7.el9_4.1.src.rpm SHA-256: d15fa746ae30e56fd3632c0937aeab0b2cd02ae6c20fcb2ec49b60bd23dfbba3
s390x
tesseract-4.1.1-7.el9_4.1.s390x.rpm SHA-256: 7d2aa530fabd433766b53b00e383fff3bdf6137f1a51e11cae262f9363b588d8
tesseract-debuginfo-4.1.1-7.el9_4.1.s390x.rpm SHA-256: 87f01538568e10ce09d147fda238c845edc786806469e44a0fb9199f9b9dc7a5
tesseract-debugsource-4.1.1-7.el9_4.1.s390x.rpm SHA-256: 18483d80ce60c9f403f444cf49019f369bc2992cd0705871338eab3354c2dfe3
tesseract-tools-debuginfo-4.1.1-7.el9_4.1.s390x.rpm SHA-256: 51695d70fe9bbbd44911f3ec2110866781815973d94ab4d7e72bbb448639e8a4

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4

SRPM
tesseract-4.1.1-7.el9_4.1.src.rpm SHA-256: d15fa746ae30e56fd3632c0937aeab0b2cd02ae6c20fcb2ec49b60bd23dfbba3
x86_64
tesseract-4.1.1-7.el9_4.1.i686.rpm SHA-256: 2079939fe0df9a9a7b632a35878c587ad13933465227808e88ea6125bedb291b
tesseract-4.1.1-7.el9_4.1.x86_64.rpm SHA-256: c556cbbfb4f1a810b95a195d5e82202633da7602bfe98dac7c73941731b52653
tesseract-debuginfo-4.1.1-7.el9_4.1.i686.rpm SHA-256: cb3b4bc5ead0036d23aad6d2231c4f51381f573576fcf99b85f57ede4f9d7c10
tesseract-debuginfo-4.1.1-7.el9_4.1.x86_64.rpm SHA-256: 142abdb83a9dcf47f5e01d11d7a6feae79625d1c3ccbaff53e2c35f53eac373f
tesseract-debugsource-4.1.1-7.el9_4.1.i686.rpm SHA-256: e8919f7072927dbb11cb76207aeff174701baebb9ffc9da8f1ab81a28e1e1ac6
tesseract-debugsource-4.1.1-7.el9_4.1.x86_64.rpm SHA-256: 4b07ab5f2305892e9cb8a7d52243218aae1abcd0f9a97a143bbfdfde616c0008
tesseract-tools-debuginfo-4.1.1-7.el9_4.1.i686.rpm SHA-256: d5dc2bd6ce8f85ffc3fc6afc727fa7ea9a6b7756446a638797052f5b20587414
tesseract-tools-debuginfo-4.1.1-7.el9_4.1.x86_64.rpm SHA-256: 435dca952eaa0c9c8e421cd67d54f29a8bd5cbc7acb603369766cddf85de9a9d

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4

SRPM
tesseract-4.1.1-7.el9_4.1.src.rpm SHA-256: d15fa746ae30e56fd3632c0937aeab0b2cd02ae6c20fcb2ec49b60bd23dfbba3
aarch64
tesseract-4.1.1-7.el9_4.1.aarch64.rpm SHA-256: 07653a878ccb21b3c0f649df517880652dbdd2124dee0ce04101f020397c6779
tesseract-debuginfo-4.1.1-7.el9_4.1.aarch64.rpm SHA-256: 18eb4b0129860ee2c5659122e9d45dbdb8471360c402a18647e0d61d0a880360
tesseract-debugsource-4.1.1-7.el9_4.1.aarch64.rpm SHA-256: 4aa7405d0bd17eb5ca976d060fa818dc3f0d052928cd4aab76a6a416e1bcab9d
tesseract-tools-debuginfo-4.1.1-7.el9_4.1.aarch64.rpm SHA-256: f0c85558d9e2c4dee0fa0da7a1263101a7a0b4c22fcf7bef9a3b7ef3e0766497

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4

SRPM
tesseract-4.1.1-7.el9_4.1.src.rpm SHA-256: d15fa746ae30e56fd3632c0937aeab0b2cd02ae6c20fcb2ec49b60bd23dfbba3
ppc64le
tesseract-4.1.1-7.el9_4.1.ppc64le.rpm SHA-256: 758015bf954597644d96766093017f0b5dc05f9e309c55ee46a1f812d7f2b4d6
tesseract-debuginfo-4.1.1-7.el9_4.1.ppc64le.rpm SHA-256: b3a9b913e654cd03e5b5f38f913aa9a8a47c47b07141cc1b86a34167ead30cd1
tesseract-debugsource-4.1.1-7.el9_4.1.ppc64le.rpm SHA-256: 31acb5da3166d93dd972ce102c00d3165e1e3c98a60a52a5829377558baaf693
tesseract-tools-debuginfo-4.1.1-7.el9_4.1.ppc64le.rpm SHA-256: 9fca8509bae39f592f65a58bb35f8e7c1fedbd2a5d310dacc4521f95a9f46b57

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4

SRPM
tesseract-4.1.1-7.el9_4.1.src.rpm SHA-256: d15fa746ae30e56fd3632c0937aeab0b2cd02ae6c20fcb2ec49b60bd23dfbba3
s390x
tesseract-4.1.1-7.el9_4.1.s390x.rpm SHA-256: 7d2aa530fabd433766b53b00e383fff3bdf6137f1a51e11cae262f9363b588d8
tesseract-debuginfo-4.1.1-7.el9_4.1.s390x.rpm SHA-256: 87f01538568e10ce09d147fda238c845edc786806469e44a0fb9199f9b9dc7a5
tesseract-debugsource-4.1.1-7.el9_4.1.s390x.rpm SHA-256: 18483d80ce60c9f403f444cf49019f369bc2992cd0705871338eab3354c2dfe3
tesseract-tools-debuginfo-4.1.1-7.el9_4.1.s390x.rpm SHA-256: 51695d70fe9bbbd44911f3ec2110866781815973d94ab4d7e72bbb448639e8a4

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.