linux/meta-openembedded.git/meta-python/recipes-devtools/python3-nltk/python3-nltk_3.9.2.bb, branch wrynose

python3-nltk: upgrade 3.9.2 -> 3.9.3

2026-02-25T06:30:31+00:00

Contains fix for CVE-2026-14009. Changelog: * Fix CVE-2025-14009: secure ZIP extraction in nltk.downloader * Block path traversal/arbitrary reads in nltk.data for protocol-less refs * Block path traversal/abs paths in corpus readers and FS pointers * Validate external StanfordSegmenter JARs using SHA256 * Add optional sandbox enforcement for filestring() * Maintenance: downloader/zipped models, CI/tooling updates Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj

python3-nltk: set CVE_PRODUCT

2025-12-31T16:28:55+00:00

The CVEs for this project are tracked under nltk:nltk CPE, which doesn't match the default python:nltk CPE. See CVE db query: sqlite> select * from products where PRODUCT like 'nltk'; CVE-2019-14751|nltk|nltk|||3.4.5|< CVE-2021-3828|nltk|nltk|||3.6.3|<= CVE-2021-3842|nltk|nltk|||3.6.6|< CVE-2021-43854|nltk|nltk|||3.6.5|< Set the CVE_PRODUCT so it can be used to match CVEs. Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj

python3-nltk: upgrade 3.9.1 -> 3.9.2

2025-10-14T16:00:23+00:00

Changelog: ============= * Update download checksums to use SHA256 in built index * Fix percentage escape in new-style string formatting * replace shortened URLs using goo.gl * Make Wordnet interoperable with various taggers and tagged corpora * Fix saving PerceptronTagger * Document how to reproduce old Wordnet studies * properly initialize Portuguese corpus reader * support for mixed rules conversion into Chomsky Normal Form * only import tkinter if a GUI is needed * issue #2112 with Corenlp * new environment variable NLTK_DOWNLOADER_FORCE_INTERACTIVE_SHELL * Lesk defaults to most frequent sense in case of ties Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj