Alerts This Week
Warning Icon 1 619
Alerts This Week
Warning Icon 1 619

openSUSE 15-SP1: openSUSE-SU-2020:0440-1 Moderate: python-nltk Zip Slip

opensuse
Calendar Grey April 1, 2020
Dist Opensuse Esm H88
Addresses a vulnerability involving zip slip in python-nltk for openSUSE classified as moderate in the recent security patch.
An update that fixes one vulnerability is now available.

Description

This update for python-nltk fixes the following issues:

Update to 3.4.5 (boo#1146427, CVE-2019-14751):

* CVE-2019-14751: Fixed Zip slip vulnerability in downloader for the

unlikely situation where a user configures their downloader to use a

compromised server (boo#1146427)

Update to 3.4.4:

* fix bug in plot function (probability.py)

* add improved PanLex Swadesh corpus reader

* add Text.generate()

* add QuadgramAssocMeasures

* add SSP to tokenizers * return confidence of best tag from AveragedPerceptron

* make plot methods return Axes objects

* don't require list arguments to PositiveNaiveBayesClassifier.train

* fix Tree classes to work with native Python copy library

* fix inconsistency for NomBank

* fix random seeding in LanguageModel.generate

* fix ConditionalFreqDist mutation on tabulate/plot call

* fix broken links in documentation

* fix misc Wordnet issues

* update installation instructions

Version update...

Read the Full Advisory

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP1:

zypper in -t patch openSUSE-2020-440=1

Package List

- openSUSE Backports SLE-15-SP1 (noarch):

python2-nltk-3.4.5-bp151.4.3.1

python3-nltk-3.4.5-bp151.4.3.1

References

https://www.suse.com/security/cve/CVE-2019-14751.html

https://bugzilla.suse.com/1146427

--

Announcement ID: openSUSE-SU-2020:0440-1
Rating: moderate
Affected Products: openSUSE Backports SLE-15-SP1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here