Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-nltk for openSUSE:Factory checked in at 2026-08-06 16:24:02 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-nltk (Old) and /work/SRC/openSUSE:Factory/.python-nltk.new.16738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-nltk" Thu Aug 6 16:24:02 2026 rev:24 rq:1369684 version:3.10.1 Changes: -------- --- /work/SRC/openSUSE:Factory/python-nltk/python-nltk.changes 2026-06-22 17:29:23.077631323 +0200 +++ /work/SRC/openSUSE:Factory/.python-nltk.new.16738/python-nltk.changes 2026-08-06 16:25:44.439853456 +0200 @@ -1,0 +2,17 @@ +Mon Aug 3 15:39:07 UTC 2026 - Markéta Machová <[email protected]> + +- Update to 3.10.1 + * fix ReDoS in TweetTokenizer url and email regexes + * Prevent module hijacking in inline imports + * use exact thirds in masi_distance + * Fix uncontrolled search path in HunposTagger + * Fix word_tokenize: pad opening single quote before multi-letter words + * Avoid retaining bllip import exceptions + * Implement Tree.pformat_latex_forest + * fix(security): validate types after wordnet_app pickle deserialization + * Expand ~ in env-var paths (NLTK_DATA, find_file_iter) + * Add custom import hook to prevent module hijacking from CWD + * detokenize periods mid-string, not just the last one + * don't collapse repeated non-Latin letters in TweetTokenizer + +------------------------------------------------------------------- @@ -4 +21,2 @@ -- Update to 3.10.0rc1 (CVE-2026-54293, bsc#1268526) +- Update to 3.10.0rc1 (CVE-2026-54293, bsc#1268526, bsc#1273252, CVE-2026-12061, + bsc#1273254, CVE-2026-12072, bsc#1273255, CVE-2026-12074, bsc#1273256, CVE-2026-12075) Old: ---- nltk-3.10.0rc1.obscpio New: ---- nltk-3.10.1.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-nltk.spec ++++++ --- /var/tmp/diff_new_pack.sjbMht/_old 2026-08-06 16:25:45.003873148 +0200 +++ /var/tmp/diff_new_pack.sjbMht/_new 2026-08-06 16:25:45.007873288 +0200 @@ -17,10 +17,9 @@ %define modname nltk -%define distversion 3.10.0 %{?sle15_python_module_pythons} Name: python-nltk -Version: 3.10.0rc1 +Version: 3.10.1 Release: 0 Summary: Natural Language Toolkit License: Apache-2.0 @@ -187,6 +186,6 @@ %doc README.md %license LICENSE.txt %{python_sitelib}/nltk/ -%{python_sitelib}/nltk-%{distversion}.dist-info/ +%{python_sitelib}/nltk-%{version}.dist-info/ %python_alternative %{_bindir}/nltk ++++++ _service ++++++ --- /var/tmp/diff_new_pack.sjbMht/_old 2026-08-06 16:25:45.051874824 +0200 +++ /var/tmp/diff_new_pack.sjbMht/_new 2026-08-06 16:25:45.055874963 +0200 @@ -3,8 +3,8 @@ <param name="url">https://github.com/nltk/nltk</param> <param name="scm">git</param> <param name="exclude">web/*</param> - <param name="version">3.10.0rc1</param> - <param name="revision">v3.10.0-rc1</param> + <param name="version">3.10.1</param> + <param name="revision">v3.10.1</param> </service> <service mode="manual" name="set_version" /> <service mode="buildtime" name="tar" /> ++++++ nltk-3.10.0rc1.obscpio -> nltk-3.10.1.obscpio ++++++ ++++ 12819 lines of diff (skipped) ++++++ nltk.obsinfo ++++++ --- /var/tmp/diff_new_pack.sjbMht/_old 2026-08-06 16:25:45.907904711 +0200 +++ /var/tmp/diff_new_pack.sjbMht/_new 2026-08-06 16:25:45.963906666 +0200 @@ -1,5 +1,5 @@ name: nltk -version: 3.10.0rc1 -mtime: 1781208586 -commit: 16a32d680d070254d5744e33fa83f9c0056d5a1f +version: 3.10.1 +mtime: 1785470601 +commit: 35813c85af3f13d4f7196085854eafb3d0c5db02
