diff mbox series

[meta-python,44/70] python3-nltk: upgrade 3.10.2 -> 3.10.3

Message ID 20260819093514.1101-44-wangmy@fujitsu.com
State New
Headers show
Series [meta-oe,01/70] avro-c: upgrade 1.12.1 -> 1.12.2 | expand

Commit Message

Wang Mingyu Aug. 19, 2026, 9:34 a.m. UTC
From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
===========
- docs: wrap Chat-80 HOWTO output
- Sandbox Stanford JAR execution to nltk_data directories
- Harden path-traversal / file-I/O sandbox: close write-side symlink TOCTOU +
  shared-temp squat, lock the cluster with a living audit (CWE-22/59/377)
- Extend algorithmic-complexity DoS hardening: repo-wide sweep + two-string
  distances (CWE-407/CWE-400)
- Bound unbounded-work DoS in parsers and grammar transforms (CWE-407/674/835)
- fix(security): sandbox MaltParser's Java execution (CVE-2026-12252,
  CVE-2026-12841)
- fix(security): trust the system temp dir only when it is private
  (CWE-377/CWE-378)
- fix(security): validate corpus-reader roots against the data sandbox (CWE-73)
- fix(security): validate per-call java() options and replace the -XX:/-D
  allowlist with a minimal one (CWE-88)
- Additional security hardening (CWE-407, CWE-426, CWE-427, CWE-502, CWE-59,
  CWE-776, CWE-918)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 .../{python3-nltk_3.10.2.bb => python3-nltk_3.10.3.bb}          | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-python/recipes-devtools/python3-nltk/{python3-nltk_3.10.2.bb => python3-nltk_3.10.3.bb} (89%)
diff mbox series

Patch

diff --git a/meta-python/recipes-devtools/python3-nltk/python3-nltk_3.10.2.bb b/meta-python/recipes-devtools/python3-nltk/python3-nltk_3.10.3.bb
similarity index 89%
rename from meta-python/recipes-devtools/python3-nltk/python3-nltk_3.10.2.bb
rename to meta-python/recipes-devtools/python3-nltk/python3-nltk_3.10.3.bb
index 3e209a8d73..6140afdf13 100644
--- a/meta-python/recipes-devtools/python3-nltk/python3-nltk_3.10.2.bb
+++ b/meta-python/recipes-devtools/python3-nltk/python3-nltk_3.10.3.bb
@@ -24,4 +24,4 @@  RRECOMMENDS:${PN} = "\
 
 inherit setuptools3 pypi
 
-SRC_URI[sha256sum] = "fcfd80fb77931868cea8357573c79838b8abc609942ef9914d1c9f6070d4645c"
+SRC_URI[sha256sum] = "bb9327a461c3811c2fa4900e03840401f2126adfb30c0072827c433bd2444ea4"