Sign me up Login

Details about package tesseract

Name:	tesseract (PTS)
Uploader:	Alexander Pozdnyakov <almipo@mail.ru> (Debian QA page)
Description:	tesseract-ocr - Tesseract command line OCR tool libtesseract-dev - Development files for the tesseract command line OCR tool libtesseract5 - Tesseract OCR library tesseract-ocr-all - Tesseract OCR with all language and script packages

Package uploads

Upload #2

Information

Version:	5.5.4-1
Uploaded:	2026-11-02 15:52
Source package:	tesseract_5.5.4-1.dsc
Distribution:	unstable
Section:	graphics
Priority:	optional
Homepage:	https://github.com/tesseract-ocr/
Closes bugs:	#1144388 #1147403

Changelog

 tesseract (5.5.4-1) unstable; urgency=medium
 .
   * New upstream release. Includes fixes as the resolution
     of the following security issue (Closes: #1144388, #1147403)
     - CVE-2026-73066
     - CVE-2026-73067
     - CVE-2026-88047
     - CVE-2026-88048
     - CVE-2026-88049
     - CVE-2026-88050
     - CVE-2026-88051
     - CVE-2026-88052
     - CVE-2026-88053
     - CVE-2026-88054
   * Update debian/copyright:
     - Updated year
   * Update debian/control:
     - Removed: asciidoc, xsltproc, docbook-xsl,
       docbook-xml
     - Added: asciidoctor, ruby-asciidoctor-pdf
   * Build with --enable-doc

QA information

–
Package uses debhelper-compat

Debhelper compatibility level 13

–

Package is the latest upstream version

Local:	5.5.4
Upstream:	5.5.4
Url:	https://github.com/tesseract-ocr/tesseract/archive/refs/tags/5.5.4.tar.gz

–
Package is not native

Format: 3.0 (quilt)
–
"Maintainer" email is the same as the uploader
–
Package has lintian informational tags
tesseract source
- I out-of-date-standards-version
  - 4.7.0 (released 2024-04-07) (current is 4.7.4)
- I patch-not-forwarded-upstream
  - [debian/patches/0002_disable_NEON.diff]
- X debian-watch-does-not-check-openpgp-signature
  - [debian/watch]
- X update-debian-copyright
  - 2025 vs 2026 [debian/copyright:17]
- X very-long-line-length-in-source-file
  - 12183 > 512 [test/testdata/kor/kor.traineddata:1758]
  - 1740 > 512 [test/testdata/deu.Arial_Unicode_MS.exp0.lstmf:1765]
  - 1748 > 512 [test/testdata/eng.Arial_Unicode_MS.exp0.lstmf:3381]
  - 1776 > 512 [test/testdata/kan/kan.traineddata:9]
  - 1855 > 512 [test/testdata/kor.Arial_Unicode_MS.exp0.lstmf:653]
  - 1888 > 512 [test/testdata/fra/fra.traineddata:2]
  - 1894 > 512 [test/testdata/fra.Arial_Unicode_MS.exp0.lstmf:997]
  - 1913 > 512 [test/testdata/kan.Arial_Unicode_MS.exp0.lstmf:1075]
  - 2001 > 512 [test/testdata/eng.Arial.exp0.lstmf:5733]
  - 4921 > 512 [test/testdata/eng/eng.traineddata:22828]
  - 5352 > 512 [test/testdata/deu/deu.traineddata:3753]
–
Package closes RC bugs
- src:tesseract:
  - #1144388 (Important): tesseract: CVE-2026-73066 CVE-2026-73067
  - #1147403 (Grave): tesseract: CVE-2026-88047 CVE-2026-88048 CVE-2026-88049 CVE-2026-88050 CVE-2026-88051 CVE-2026-88052 CVE-2026-88053 CVE-2026-88054
–
No VCS field present
–
Package is already in Debian
- The package uploader is currently maintaining tesseract in Debian
- Last upload was on the 2026-03-31
–
d/copyright is in DEP5 format

Upstream Contact: Ray Smith <theraysmith@users.sourceforge.net>

Licenses: MIT, Apache-2.0

Comments

No comments

Upload #1

Information

Version:	5.5.3-1
Uploaded:	2026-08-14 19:37
Source package:	tesseract_5.5.3-1.dsc
Distribution:	unstable
Section:	graphics
Priority:	optional
Homepage:	https://github.com/tesseract-ocr/
Closes bugs:	#1144388

Changelog

 tesseract (5.5.3-1) unstable; urgency=medium
 .
   * New upstream release (Closes: #1144388)
     + [CVE-2026-73066]: Tesseract: Heap out-of-bounds
       write in LSTM Convolve layer via crafted .traineddata
     + [CVE-2026-73067]: Tesseract: Heap OOB read in the DAWG loader
   * Update debian/copyright:
     - Updated year
   * Update debian/control:
     - Removed: asciidoc, xsltproc, docbook-xsl,
       docbook-xml
     - Added: asciidoctor, ruby-asciidoctor-pdf
   * Build with --enable-doc

QA information

–
Package has lintian informational tags
tesseract source
- I out-of-date-standards-version
  - 4.7.0 (released 2024-04-07) (current is 4.7.4)
- I patch-not-forwarded-upstream
  - [debian/patches/0002_disable_NEON.diff]
- X debian-watch-does-not-check-openpgp-signature
  - [debian/watch]
- X update-debian-copyright
  - 2025 vs 2026 [debian/copyright:17]
- X very-long-line-length-in-source-file
  - 12183 > 512 [test/testdata/kor/kor.traineddata:1758]
  - 1740 > 512 [test/testdata/deu.Arial_Unicode_MS.exp0.lstmf:1765]
  - 1748 > 512 [test/testdata/eng.Arial_Unicode_MS.exp0.lstmf:3381]
  - 1776 > 512 [test/testdata/kan/kan.traineddata:9]
  - 1855 > 512 [test/testdata/kor.Arial_Unicode_MS.exp0.lstmf:653]
  - 1888 > 512 [test/testdata/fra/fra.traineddata:2]
  - 1894 > 512 [test/testdata/fra.Arial_Unicode_MS.exp0.lstmf:997]
  - 1913 > 512 [test/testdata/kan.Arial_Unicode_MS.exp0.lstmf:1075]
  - 2001 > 512 [test/testdata/eng.Arial.exp0.lstmf:5733]
  - 4921 > 512 [test/testdata/eng/eng.traineddata:22828]
  - 5352 > 512 [test/testdata/deu/deu.traineddata:3753]
–
Package closes bug
- src:tesseract:
  - #1144388 (Important): tesseract: CVE-2026-73066 CVE-2026-73067
–
No VCS field present
–
Package is already in Debian
- The package uploader is currently maintaining tesseract in Debian
- Last upload was on the 2026-03-31
–
d/copyright is in DEP5 format

Upstream Contact: Ray Smith <theraysmith@users.sourceforge.net>

Licenses: MIT, Apache-2.0
–
Package uses debhelper-compat

Debhelper compatibility level 13

–

Package is the latest upstream version

Local:	5.5.3
Upstream:	5.5.3
Url:	https://github.com/tesseract-ocr/tesseract/archive/refs/tags/5.5.3.tar.gz

–
Package is not native

Format: 3.0 (quilt)
–
"Maintainer" email is the same as the uploader

Comments

No comments

Upstream Contact:	Ray Smith <theraysmith@users.sourceforge.net>
Licenses:	MIT, Apache-2.0