nltk (3.1-1ubuntu0.1+esm3) xenial-security; urgency=medium

  * SECURITY UPDATE: Remote code execution using zipslip
    - debian/patches/CVE-2025-14009.patch: Add directory and symlink
      validation to avoid zipslip attacks in `_unzip_iter`
    - CVE-2025-14009

 -- Shishir Subedi <shishir.subedi@canonical.com>  Fri, 24 Apr 2026 13:04:19 +0545

nltk (3.1-1ubuntu0.1+esm2) xenial-security; urgency=medium

  * SECURITY UPDATE: Regular Expression Denial of Service
    - debian/patches/CVE-2021-3842.patch: Fix regular expressions to
      prevent ReDoS
    - debian/patches/CVE-2021-43854.patch: Fix regular expressions in
      PunktSentenceTokenizer to prevent ReDoS
    - CVE-2021-3842
    - CVE-2021-43854

 -- Bruce Cable <bruce.cable@canonical.com>  Wed, 19 Mar 2025 15:30:44 +1100

nltk (3.1-1ubuntu0.1+esm1) xenial-security; urgency=medium

  * SECURITY UPDATE: Fix regular expression denial of service in CorpusReader
    - debian/patches/CVE-2021-3828-1.patch: Fix ReDoS vulnerability
    - debian/patches/CVE-2021-3828-2.patch: Improve test case
    - CVE-2021-3828

 -- Spyros Seimenis <spyros.seimenis@canonical.com>  Mon, 10 Jan 2022 15:33:49 +0200

nltk (3.1-1ubuntu0.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Zip Slip directory traversal via a malicious NLTK package
    download
    - debian/patches/CVE-2019-14751.patch: use built-in implementation of unzip
    - CVE-2019-14751

 -- Mike Salvatore <mike.salvatore@canonical.com>  Thu, 08 Aug 2019 07:54:31 -0400

nltk (3.1-1) unstable; urgency=medium

  * New upstream release.
  * Don't use nltk/six.py but python-six:
    + added use-six-package.diff.
    + stripe out nltk/six.py via Files-Excluded in deb/copyright.
  * deb/control: bumped X-Python-Version to 2.7.
  * Added deb/README.Debian with info where to find a list of changes
    (use override for dh_installdocs in deb/rules to contribute it
    into both binaries).

 -- Daniel Stender <debian@danielstender.com>  Sat, 24 Oct 2015 19:35:19 +0200

nltk (3.0.5-1) unstable; urgency=medium

  * New upstream release.
  * deb/control: added six to Depends.
  * deb/rules: removed override for dh_installdocs (README.txt dropped).
  * added deb/source/options.

 -- Daniel Stender <debian@danielstender.com>  Thu, 10 Sep 2015 14:17:05 +0200

nltk (3.0.4-1) unstable; urgency=medium

  * New upstream release.

 -- Daniel Stender <debian@danielstender.com>  Wed, 15 Jul 2015 23:25:30 +0200

nltk (3.0.3-1) unstable; urgency=medium

  * New upstream release.

 -- Daniel Stender <debian@danielstender.com>  Mon, 15 Jun 2015 06:35:37 +0200

nltk (3.0.2-1) unstable; urgency=medium

  * New upstream release.
  * deb/control: added Tkinter to Recommends.
  * deb/copyright: expanded copyright spans.
  * deb/rules: added override for auto_install with fix of incorrect
    permission in nltk/test/.
  * deb/watch: watch pypi.debian.net.
  * Added deb/source/local-options.

 -- Daniel Stender <debian@danielstender.com>  Mon, 27 Apr 2015 09:24:39 +0200

nltk (3.0.0-1) unstable; urgency=medium

  * Initial release (Closes: #279422, LP: #1155282).

 -- Daniel Stender <debian@danielstender.com>  Sat, 11 Oct 2014 00:31:27 +0200
