diff mbox series

[meta-oe,whinlatter,3/6] python3-nltk: upgrade 3.9.2 -> 3.9.3

Message ID 20260306183347.1014705-3-skandigraun@gmail.com
State New
Headers show
Series [meta-oe,whinlatter,1/6] imagemagick: upgrade 7.1.2-13 -> 7.1.2-15 | expand

Commit Message

Gyorgy Sarvari March 6, 2026, 6:33 p.m. UTC 
Contains fix for CVE-2026-14009.

Changelog:
* Fix CVE-2025-14009: secure ZIP extraction in nltk.downloader
* Block path traversal/arbitrary reads in nltk.data for protocol-less refs
* Block path traversal/abs paths in corpus readers and FS pointers
* Validate external StanfordSegmenter JARs using SHA256
* Add optional sandbox enforcement for filestring()
* Maintenance: downloader/zipped models, CI/tooling updates

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 14d464c15094d1758dc14706646a8aa645a3bf34)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
---
 .../{python3-nltk_3.9.2.bb => python3-nltk_3.9.3.bb}            | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-python/recipes-devtools/python3-nltk/{python3-nltk_3.9.2.bb => python3-nltk_3.9.3.bb} (88%)
diff mbox series

Patch

diff --git a/meta-python/recipes-devtools/python3-nltk/python3-nltk_3.9.2.bb b/meta-python/recipes-devtools/python3-nltk/python3-nltk_3.9.3.bb
similarity index 88%
rename from meta-python/recipes-devtools/python3-nltk/python3-nltk_3.9.2.bb
rename to meta-python/recipes-devtools/python3-nltk/python3-nltk_3.9.3.bb
index 8a1e0cc047..1748cf6826 100644
--- a/meta-python/recipes-devtools/python3-nltk/python3-nltk_3.9.2.bb
+++ b/meta-python/recipes-devtools/python3-nltk/python3-nltk_3.9.3.bb
@@ -21,4 +21,4 @@  RRECOMMENDS:${PN} = "\
 
 inherit setuptools3 pypi
 
-SRC_URI[sha256sum] = "0f409e9b069ca4177c1903c3e843eef90c7e92992fa4931ae607da6de49e1419"
+SRC_URI[sha256sum] = "cb5945d6424a98d694c2b9a0264519fab4363711065a46aa0ae7a2195b92e71f"