Alerts This Week
Warning Icon 1 664
Alerts This Week
Warning Icon 1 664

openSUSE: 2020:0436-1 Moderate: Python-NLTK Zip Slip Fix

opensuse
Calendar Grey March 31, 2020
Dist Opensuse Esm H88
openSUSE releases a critical patch for python-nltk that resolves a zip slip vulnerability and enhances performance. Upgrade today!
An update that fixes one vulnerability is now available.

Description

This update for python-nltk fixes the following issues:

Update to 3.4.5 (boo#1146427, CVE-2019-14751):

* CVE-2019-14751: Fixed Zip slip vulnerability in downloader for the

unlikely situation where a user configures their downloader to use a

compromised server (boo#1146427)

Update to 3.4.4:

* fix bug in plot function (probability.py)

* add improved PanLex Swadesh corpus reader

* add Text.generate()

* add QuadgramAssocMeasures

* add SSP to tokenizers * return confidence of best tag from AveragedPerceptron

* make plot methods return Axes objects

* don't require list arguments to PositiveNaiveBayesClassifier.train

* fix Tree classes to work with native Python copy library

* fix inconsistency for NomBank

* fix random seeding in LanguageModel.generate

* fix ConditionalFreqDist mutation on tabulate/plot call

* fix broken links in documentation

* fix misc Wordnet issues

* update installation instructions

Version update...

Read the Full Advisory

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.1:

zypper in -t patch openSUSE-2020-436=1

Package List

- openSUSE Leap 15.1 (noarch):

python2-nltk-3.4.5-lp151.4.3.1

python3-nltk-3.4.5-lp151.4.3.1

References

https://www.suse.com/security/cve/CVE-2019-14751.html

https://bugzilla.suse.com/1146427

--

Announcement ID: openSUSE-SU-2020:0436-1
Rating: moderate
Affected Products: openSUSE Leap 15.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here