Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
bddf0c8c by Salvatore Bonaccorso at 2026-08-11T22:28:35+02:00
Two new Tesseract issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -150,9 +150,16 @@ CVE-2026-73069 (Twenty is an open-source CRM (customer 
relationship management)
 CVE-2026-73068 (ToolJet is the open-source foundation am AI-native platform 
for buildi ...)
        TODO: check
 CVE-2026-73067 (Tesseract is an open source OCR engine. Prior to 5.5.3, a 
crafted .tra ...)
-       TODO: check
+       - tesseract <unfixed>
+       NOTE: 
https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-x3vq-7rr7-5x3h
+       NOTE: https://github.com/tesseract-ocr/tesseract/pull/4581
+       NOTE: Fixed by: 
https://github.com/tesseract-ocr/tesseract/commit/55287a94b8044c05ce3fd10f5aca6ebbd238e518
 (5.5.3)
+       NOTE: Fixed by: 
https://github.com/tesseract-ocr/tesseract/commit/82727cc11c34eaf1249af002d69f6bbae70993b9
 (5.5.3)
 CVE-2026-73066 (Tesseract is an open source OCR engine. Prior to 5.5.3, a 
crafted .tra ...)
-       TODO: check
+       - tesseract <unfixed>
+       NOTE: 
https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-7j76-5rq5-5jg8
+       NOTE: https://github.com/tesseract-ocr/tesseract/pull/4588
+       NOTE: Fixed by: 
https://github.com/tesseract-ocr/tesseract/commit/2f4d2f4bf45c363785d7bf1da29b6628f8939a72
 (5.5.3)
 CVE-2026-72971 (Improper link resolution before file access ('link following') 
in Wind ...)
        NOT-FOR-US: Microsoft
 CVE-2026-72925 (SWC is a TypeScript / JavaScript compiler written in Rust. 
Prior to @s ...)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bddf0c8c9c312e8c0904cd58fb654cc18cb3d1c5

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bddf0c8c9c312e8c0904cd58fb654cc18cb3d1c5
You're receiving this email because of your account on salsa.debian.org. Manage 
all notifications: https://salsa.debian.org/-/profile/notifications | Help: 
https://salsa.debian.org/help


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to