सुरक्षा सलाह पर वापस जाएँ

Tesseract Security Update — AlmaLinux 9 (ALSA-2026:95086)

ALSA-2026:95086 updates Tesseract (the OCR engine) on AlmaLinux 9, fixing six CVEs (CVE-2026-88048 through CVE-2026-88053) in its image parsing. Update with dnf update tesseract on servers running OCR workloads — image-parsing engines convert uploaded scans, so crafted images reach the vulnerable code directly.

High 7.1 CVSS
AlmaLinux 9

SharedLicense लाइसेंस के तहत इसका अर्थ

OCR engines parse untrusted images by design — memory-safety flaws there turn a crafted scan into crashes or code execution inside the processing service.

9.1 Change Log

WHMCS is working to improve the quality and availability of our supported languages. As a result, this and future WHMCS releases will include more updates and additions to localization files in the /lang and /admin/lang directories.

  • These changes will not appear in the list of changelog entries.
  • If you customize these files, we recommend reviewing the language string changes in each new WHMCS release before you update.

Version 9.1.0 (General Availability) #

Implemented #

  • WHMCS-27002 — Iris Admin Theme Preview
  • WHMCS-27279 — Automatic MarketConnect Account Registration

Maintenance #

  • WHMCS-25146 — Remove Unused Credit and Debit Note Number Incrementation Settings
  • WHMCS-26154 — Improve Security for the Installation and Upgrade Process
  • WHMCS-27300 — Correct Amount Column Sorting on My Credit and Debit Notes
  • WHMCS-27464 — Improve Security for the Setup Wizard
  • WHMCS-27465 — Add Description Label for Payment Methods at Cart Checkout
  • WHMCS-27564 — Correct Automatic Update Failure When the Site Is Accessed Mid-Update
  • WHMCS-28022 — Standardize Password Error Message Styling in the Client Area
  • WHMCS-28033 — Improve Navigation and TLD Selection in the Getting Started Wizard
  • WHMCS-28076 — Correct MarketConnect Service Management Actions in the Nexus Theme
  • WHMCS-28077 — Add Missing MarketConnect Dynamic Service Commands to the Nexus Theme
  • WHMCS-28113 — Improve Security for Knowledgebase Search in the Nexus Theme
  • WHMCS-28158 — Match Generated Password Length to the Minimum Password Length Setting
  • WHMCS-28166 — Correct OAuth Authorization Failure When Using the Nexus Theme
  • WHMCS-28382 — Correct Handling of Multiple Upgrades in the Nexus Cart
  • WHMCS-28444 — Show Billing Term Details in the Cart Item Price Tooltip
  • WHMCS-28459 — Correct Horizontal Scrolling on the Mobile View Cart Page in the Nexus Theme

Modules #

  • WHMCS-26564 — Correct Error Paying Invoices with Stored Cards via Stripe Dynamic Payments
  • WHMCS-27903 — Preserve Assigned Shared IP Address on Package Change for Plesk
  • WHMCS-28135 — Update Retirement Notices on the Admin Dashboard for PayPal Legacy
  • WHMCS-28136 — Add Admin Area Warning for Outdated API Credentials in BitPay
  • WHMCS-28343 — Prevent Paid Plan Substitution When the Free Plan Is Disabled for Nova Cloud
  • WHMCS-28413 — Correct Password Field Display in the Getting Started Wizard for eNom
  • WHMCS-28470 — Remove PayPal Basic and PayPal Checkout modules

Version 9.1.0 (Beta) #

Implemented #

  • WHMCS-20034 — Support for PHP 8.4
  • WHMCS-20418 — Display notice of unsaved Ticket Scheduled Actions
  • WHMCS-22150 — Unattended Auto Updates for Maintenance Releases
  • WHMCS-24543 — Credit Notes Overview pages for Admin and Client Areas
  • WHMCS-24545 — View & Print function added to Credit Notes in the Client Area
  • WHMCS-24550 — Credit Notes support added to various reports and widgets
  • WHMCS-24689 — Setup Tasks Admin Dashboard widget
  • WHMCS-25096 — Stripe Dynamic Payments Gateway Module
  • WHMCS-26207 — Configurable Email Import Limits
  • WHMCS-27608 — Invoice Immutability and Credit Note Controls

Maintenance #

  • WHMCS-18876 — Correct Promo Search on the Domains Tab
  • WHMCS-19711 — Improved timestamp handling for Last Capture Attempt entries on Invoices
  • WHMCS-22693 — Allow HTML5 video embedding in Knowledgebase Article body
  • WHMCS-22707 — Undisclosed Security Fix
  • WHMCS-24544 — Add Balance Column to Admin and Client Invoice Lists
  • WHMCS-24769 — Correct TypeError on Automation Settings Page with empty values
  • WHMCS-25011 — Improved error handling when allowing a grace period for an order.
  • WHMCS-25049 — Improved calculations in Sales Tax Liability report
  • WHMCS-25092 — Improved performance of Nexus Cart
  • WHMCS-25172 — Improved handling of the “Mark Paid” button when updating an unpaid invoice
  • WHMCS-25204 — Prevent Division By Zero Error When Downgrading a Recurring Product
  • WHMCS-25214 — Correct Font Awesome Path Regex to Stop Repeated CSS Injection
  • WHMCS-25294 — Improved handling of Fraud related Invoice statuses
  • WHMCS-25622 — Improvements to the Mobile View of Nexus Theme
  • WHMCS-25662 — Improved handling of PayPal payments in Stripe Dynamic Payments Gateway Module
  • WHMCS-25709 — Improved handling of Automatic Domain Renewal setting
  • WHMCS-25718 — Correct Upgrading a Marketplace Service via Nexus Cart
  • WHMCS-25887 — Removal of Paid invoices from the Income by Product report.
  • WHMCS-26041 — Undisclosed Security Fix
  • WHMCS-26447 — Improved sorting of Affiliate tables in the Admin Area
  • WHMCS-26561 — Correct IMAP Mail Import Using Stale Message IDs After Deletion
  • WHMCS-27003 — Improve Performance of the Staff Online Admin Query
  • WHMCS-27323 — Add System Health Check notice if storage locations are publicly writable
  • WHMCS-27326 — Correct Apply-Once Promo Codes Being Rejected by Other Orders
  • WHMCS-27427 — Enforce Block Existing Domains Setting for Direct Cart Links
  • WHMCS-28009 — Permit multiple devices to hold an active Remember Me admin token

Modules #

  • WHMCS-20973 — Switch module endpoint to use port 443 in PSIGate
  • WHMCS-21414 — Correct scheme name for EUR transactions in GoCardless
  • WHMCS-22763 — Update BitPay module to Unified SDK
  • WHMCS-24148 — Improved process handling for PreInvoiceAutomaticCancellation hook point
  • WHMCS-25097 — Implemented a migration feature for Stripe to Stripe Dynamic Gateway Modules
  • WHMCS-26138 — Strengthen Generated Automatic Payment Password for WorldPay
  • WHMCS-26190 — Improved handling of payment captures when using the Stripe Dynamic Payment Gateway
  • WHMCS-26359 — Improve security around Staff Noticeboard
  • WHMCS-26385 — Correct WP Toolkit provisioning in cPanel
  • WHMCS-27404 — Update to XML RPC protocol version to 1.6.9.1 in Plesk
  • WHMCS-27409 — Improve validation of API Endpoint URLs
  • WHMCS-27443 — Correct SoapFault error during EV SSL Configuration for GlobalSign
  • WHMCS-27532 — Update Suspension and Unsuspension in Plesk
  • WHMCS-27812 — Update Change Password in Plesk
  • WHMCS-27880 — Improve accuracy of Module Debug Logs in Plesk

API #

  • WHMCS-24522 — Added Bundle Name to the Cart Item response payload in REST API
  • WHMCS-24523 — Added Product Type to Bundle Items in the Cart response payload in REST API
  • WHMCS-27181 — Undisclosed Security Fix
  • WHMCS-27208 — Improve handling of Addon Billing Cycle in REST API
  • WHMCS-27266 — Added headless checkout and payment endpoints to the REST API

Was this helpful?


Last modified: 2026 October 20

अक्सर पूछे जाने वाले प्रश्न

What is ALSA-2026:95086?
It is AlmaLinux's Tesseract OCR erratum for AlmaLinux 9, fixing six CVEs (CVE-2026-88048, CVE-2026-88047, CVE-2026-88049, CVE-2026-88051, CVE-2026-88053, CVE-2026-88052) in the engine's image handling.
Who is affected?
AlmaLinux 9 servers running Tesseract OCR — document-processing pipelines, receipt/scan converters and any service OCR-ing uploaded images.
How do I apply the fix?
Run dnf update tesseract and restart the OCR workers or services so they load the patched binary.
Why does an OCR engine get six CVEs at once?
Tesseract parses a wide range of image formats, each with its own decoder edge cases — security batches often bundle several parsing flaws fixed across the engine in one upstream release.

अपने सिस्टम में भेद्यताओं की जाँच करें

अपना उत्पाद और ऑपरेटिंग सिस्टम चुनें ताकि आपके लिए लागू सटीक फिक्स कमांड देख सकें।

अपना सिस्टम जाँचें