From a892f6cfc9a5b354966790660118e1277f6f07f2 Mon Sep 17 00:00:00 2001 From: Gyorgy Sarvari Date: Fri, 6 Mar 2026 19:33:44 +0100 Subject: python3-nltk: upgrade 3.9.2 -> 3.9.3 Contains fix for CVE-2026-14009. Changelog: * Fix CVE-2025-14009: secure ZIP extraction in nltk.downloader * Block path traversal/arbitrary reads in nltk.data for protocol-less refs * Block path traversal/abs paths in corpus readers and FS pointers * Validate external StanfordSegmenter JARs using SHA256 * Add optional sandbox enforcement for filestring() * Maintenance: downloader/zipped models, CI/tooling updates Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj (cherry picked from commit 14d464c15094d1758dc14706646a8aa645a3bf34) Signed-off-by: Gyorgy Sarvari Signed-off-by: Anuj Mittal --- .../python3-nltk/python3-nltk_3.9.2.bb | 24 ---------------------- .../python3-nltk/python3-nltk_3.9.3.bb | 24 ++++++++++++++++++++++ 2 files changed, 24 insertions(+), 24 deletions(-) delete mode 100644 meta-python/recipes-devtools/python3-nltk/python3-nltk_3.9.2.bb create mode 100644 meta-python/recipes-devtools/python3-nltk/python3-nltk_3.9.3.bb (limited to 'meta-python/recipes-devtools/python3-nltk') diff --git a/meta-python/recipes-devtools/python3-nltk/python3-nltk_3.9.2.bb b/meta-python/recipes-devtools/python3-nltk/python3-nltk_3.9.2.bb deleted file mode 100644 index 8a1e0cc047..0000000000 --- a/meta-python/recipes-devtools/python3-nltk/python3-nltk_3.9.2.bb +++ /dev/null @@ -1,24 +0,0 @@ -SUMMARY = "Natural Language Toolkit" -DESCRIPTION = "NLTK is a leading platform for building Python programs to work \ - with human language data. It provides easy-to-use interfaces to \ - over 50 corpora and lexical resources such as WordNet" -HOMEPAGE = "https://www.nltk.org" -BUGTRACKER = "https://github.com/nltk/nltk/issues" -LICENSE = "Apache-2.0" -LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=3b83ef96387f14655fc854ddc3c6bd57" - -RDEPENDS:${PN} = "\ - python3-click \ - python3-joblib \ - python3-tqdm \ - python3-regex \ - python3-xmlschema \ -" - -RRECOMMENDS:${PN} = "\ - python3-numpy \ -" - -inherit setuptools3 pypi - -SRC_URI[sha256sum] = "0f409e9b069ca4177c1903c3e843eef90c7e92992fa4931ae607da6de49e1419" diff --git a/meta-python/recipes-devtools/python3-nltk/python3-nltk_3.9.3.bb b/meta-python/recipes-devtools/python3-nltk/python3-nltk_3.9.3.bb new file mode 100644 index 0000000000..1748cf6826 --- /dev/null +++ b/meta-python/recipes-devtools/python3-nltk/python3-nltk_3.9.3.bb @@ -0,0 +1,24 @@ +SUMMARY = "Natural Language Toolkit" +DESCRIPTION = "NLTK is a leading platform for building Python programs to work \ + with human language data. It provides easy-to-use interfaces to \ + over 50 corpora and lexical resources such as WordNet" +HOMEPAGE = "https://www.nltk.org" +BUGTRACKER = "https://github.com/nltk/nltk/issues" +LICENSE = "Apache-2.0" +LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=3b83ef96387f14655fc854ddc3c6bd57" + +RDEPENDS:${PN} = "\ + python3-click \ + python3-joblib \ + python3-tqdm \ + python3-regex \ + python3-xmlschema \ +" + +RRECOMMENDS:${PN} = "\ + python3-numpy \ +" + +inherit setuptools3 pypi + +SRC_URI[sha256sum] = "cb5945d6424a98d694c2b9a0264519fab4363711065a46aa0ae7a2195b92e71f" -- cgit v1.2.3-54-g00ecf