From 03d118928b5a850a219c77d5ba584d63014e11cb Mon Sep 17 00:00:00 2001 From: Wang Mingyu Date: Wed, 19 Aug 2026 17:34:48 +0800 Subject: [PATCH] python3-nltk: upgrade 3.10.2 -> 3.10.3 Changelog: =========== - docs: wrap Chat-80 HOWTO output - Sandbox Stanford JAR execution to nltk_data directories - Harden path-traversal / file-I/O sandbox: close write-side symlink TOCTOU + shared-temp squat, lock the cluster with a living audit (CWE-22/59/377) - Extend algorithmic-complexity DoS hardening: repo-wide sweep + two-string distances (CWE-407/CWE-400) - Bound unbounded-work DoS in parsers and grammar transforms (CWE-407/674/835) - fix(security): sandbox MaltParser's Java execution (CVE-2026-12252, CVE-2026-12841) - fix(security): trust the system temp dir only when it is private (CWE-377/CWE-378) - fix(security): validate corpus-reader roots against the data sandbox (CWE-73) - fix(security): validate per-call java() options and replace the -XX:/-D allowlist with a minimal one (CWE-88) - Additional security hardening (CWE-407, CWE-426, CWE-427, CWE-502, CWE-59, CWE-776, CWE-918) Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj --- .../{python3-nltk_3.10.2.bb => python3-nltk_3.10.3.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-python/recipes-devtools/python3-nltk/{python3-nltk_3.10.2.bb => python3-nltk_3.10.3.bb} (89%) diff --git a/meta-python/recipes-devtools/python3-nltk/python3-nltk_3.10.2.bb b/meta-python/recipes-devtools/python3-nltk/python3-nltk_3.10.3.bb similarity index 89% rename from meta-python/recipes-devtools/python3-nltk/python3-nltk_3.10.2.bb rename to meta-python/recipes-devtools/python3-nltk/python3-nltk_3.10.3.bb index 3e209a8d73..6140afdf13 100644 --- a/meta-python/recipes-devtools/python3-nltk/python3-nltk_3.10.2.bb +++ b/meta-python/recipes-devtools/python3-nltk/python3-nltk_3.10.3.bb @@ -24,4 +24,4 @@ RRECOMMENDS:${PN} = "\ inherit setuptools3 pypi -SRC_URI[sha256sum] = "fcfd80fb77931868cea8357573c79838b8abc609942ef9914d1c9f6070d4645c" +SRC_URI[sha256sum] = "bb9327a461c3811c2fa4900e03840401f2126adfb30c0072827c433bd2444ea4"