830620 – (CVE-2021-3842) <dev-python/nltk-3.6.6: ReDoS vulnerability

Bug 830620 (CVE-2021-3842) - <dev-python/nltk-3.6.6: ReDoS vulnerability

Summary: <dev-python/nltk-3.6.6: ReDoS vulnerability

Status:	RESOLVED FIXED

Alias:	CVE-2021-3842

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal minor
Assignee:	Gentoo Security

URL:	https://github.com/nltk/nltk/commit/2...
Whiteboard:	B3 [noglsa]
Keywords:

Depends on:	830641
Blocks:
	Show dependency tree

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description John Helmert III archtester

2022-01-05 00:22:13 UTC

CVE-2021-3842:

nltk is vulnerable to Inefficient Regular Expression Complexity

Please stabilize 3.6.6.

Comment 1 Michał Górny archtester

2023-01-19 06:18:13 UTC

Package removed (though we had removed the old version some time ago, sorry!).

Comment 2 John Helmert III archtester

2023-01-19 15:39:58 UTC

Thanks! ReDoS -> noglsa