gpp_maybe Security update for python-nltk

openSUSE-2026-277

This update for python-nltk fixes the following issues: - CVE-2026-12061: ReDoS in NLTK ReviewsCorpusReader FEATURES regex (boo#1273252) - CVE-2026-12072: Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True) (boo#1273254) - CVE-2026-12074: python-nltk: path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True) (boo#1273255)

Release Date

Aug 5 2026
References

Bugzilla: 1273254, 1273255, 1273252
CVEs: CVE-2026-12061, CVE-2026-12074, CVE-2026-12072
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Package Hub 15.7 aarch64

Packages

python3-nltk
Natural Language Toolkit

3.7-bp157.3.18.1 lock rpm

SUSE Package Hub 15.7 s390x

Packages

python3-nltk
Natural Language Toolkit

3.7-bp157.3.18.1 lock rpm

SUSE Package Hub 15.7 x86_64

Packages

python3-nltk
Natural Language Toolkit

3.7-bp157.3.18.1 lock rpm

SUSE Package Hub 15.7 ppc64le

Packages

python3-nltk
Natural Language Toolkit

3.7-bp157.3.18.1 lock rpm