Files
meta-openembedded/meta-python/recipes-devtools/python3-nltk/python3-nltk_3.10.3.bb
T
Wang Mingyu 03d118928b python3-nltk: upgrade 3.10.2 -> 3.10.3
Changelog:
===========
- docs: wrap Chat-80 HOWTO output
- Sandbox Stanford JAR execution to nltk_data directories
- Harden path-traversal / file-I/O sandbox: close write-side symlink TOCTOU +
  shared-temp squat, lock the cluster with a living audit (CWE-22/59/377)
- Extend algorithmic-complexity DoS hardening: repo-wide sweep + two-string
  distances (CWE-407/CWE-400)
- Bound unbounded-work DoS in parsers and grammar transforms (CWE-407/674/835)
- fix(security): sandbox MaltParser's Java execution (CVE-2026-12252,
  CVE-2026-12841)
- fix(security): trust the system temp dir only when it is private
  (CWE-377/CWE-378)
- fix(security): validate corpus-reader roots against the data sandbox (CWE-73)
- fix(security): validate per-call java() options and replace the -XX:/-D
  allowlist with a minimal one (CWE-88)
- Additional security hardening (CWE-407, CWE-426, CWE-427, CWE-502, CWE-59,
  CWE-776, CWE-918)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-19 14:27:46 -07:00

28 lines
824 B
BlitzBasic

SUMMARY = "Natural Language Toolkit"
DESCRIPTION = "NLTK is a leading platform for building Python programs to work \
with human language data. It provides easy-to-use interfaces to \
over 50 corpora and lexical resources such as WordNet"
HOMEPAGE = "https://www.nltk.org"
BUGTRACKER = "https://github.com/nltk/nltk/issues"
LICENSE = "Apache-2.0"
LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=3b83ef96387f14655fc854ddc3c6bd57"
CVE_PRODUCT = "nltk"
CVE_STATUS[CVE-2026-0846] = "fixed-version: fixed in 3.9.3"
RDEPENDS:${PN} = "\
python3-click \
python3-joblib \
python3-tqdm \
python3-regex \
python3-xmlschema \
"
RRECOMMENDS:${PN} = "\
python3-numpy \
"
inherit setuptools3 pypi
SRC_URI[sha256sum] = "bb9327a461c3811c2fa4900e03840401f2126adfb30c0072827c433bd2444ea4"