Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package tesseract-ocr for openSUSE:Factory
checked in at 2026-11-03 17:53:27
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/tesseract-ocr (Old)
and /work/SRC/openSUSE:Factory/.tesseract-ocr.new.1257 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "tesseract-ocr"
Tue Nov 3 17:53:27 2026 rev:30 rq:1394468 version:5.5.4
Changes:
--------
--- /work/SRC/openSUSE:Factory/tesseract-ocr/tesseract-ocr.changes
2026-11-01 22:22:18.448234940 +0100
+++ /work/SRC/openSUSE:Factory/.tesseract-ocr.new.1257/tesseract-ocr.changes
2026-11-03 17:54:22.655341311 +0100
@@ -17,0 +18,8 @@
+ * Fix double-free/UAF in AppendLinePolygon for RTL PAGE XML output
+ CVE-2026-119338 bsc#1289080
+ * lstm: reject old-format WeightMatrix instead of aborting
+ CVE-2026-119339 bsc#1289082
+ * Reject malformed dimensions in GENERIC_2D_ARRAY deserialization
+ CVE-2026-119340 bsc#1289087
+ * Neutralise file-sourced pointers in ReadAdaptedClass before use
+ CVE-2026-119341 bsc#1289088
Old:
----
tesseract-5.5.3.tar.gz
tesseract-CVE-2026-88047.patch
tesseract-CVE-2026-88048.patch
tesseract-CVE-2026-88049.patch
tesseract-CVE-2026-88050.patch
tesseract-CVE-2026-88051.patch
tesseract-CVE-2026-88052.patch
tesseract-CVE-2026-88053.patch
tesseract-CVE-2026-88054.patch
----------(Old B)----------
Old: credited 2026-09-23):
tesseract-CVE-2026-88047.patch,
tesseract-CVE-2026-88048.patch,
Old: tesseract-CVE-2026-88047.patch,
tesseract-CVE-2026-88048.patch,
tesseract-CVE-2026-88049.patch,
Old: tesseract-CVE-2026-88048.patch,
tesseract-CVE-2026-88049.patch,
tesseract-CVE-2026-88050.patch,
Old: tesseract-CVE-2026-88049.patch,
tesseract-CVE-2026-88050.patch,
tesseract-CVE-2026-88051.patch,
Old: tesseract-CVE-2026-88050.patch,
tesseract-CVE-2026-88051.patch,
tesseract-CVE-2026-88052.patch,
Old: tesseract-CVE-2026-88051.patch,
tesseract-CVE-2026-88052.patch,
tesseract-CVE-2026-88053.patch,
Old: tesseract-CVE-2026-88052.patch,
tesseract-CVE-2026-88053.patch,
tesseract-CVE-2026-88054.patch
Old: tesseract-CVE-2026-88053.patch,
tesseract-CVE-2026-88054.patch
* Raise pkgconfig(lept) floor to >= 1.80 per upstream
----------(Old E)----------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ tesseract-ocr.spec ++++++
--- /var/tmp/diff_new_pack.5FRWjW/_old 2026-11-03 17:54:23.709385366 +0100
+++ /var/tmp/diff_new_pack.5FRWjW/_new 2026-11-03 17:54:23.711385450 +0100
@@ -55,8 +55,8 @@
%package common
Summary: Tesseract Open Source OCR Engine Common files
-Requires: (%{name} = %{version} or %{lname} = %{version})
Requires: tesseract-ocr-traineddata-provider
+Requires: (%{name} = %{version} or %{lname} = %{version})
Recommends: tesseract-ocr-traineddata-eng
BuildArch: noarch
