CVE-2024-36039

Advisory

Piecash has updated `pymysql` from version 0.10.1 to 1.1.1 to address CVE-2024-36039.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

~~~~~~~~~~~~~~~~~~~~~~~~~~

- bumping dependencies to fix security issues
- fix ability to get to TXN from Invoice (and Lot) [Jared Kipe]
- fix migration to SA1.4 (fix 165) [kapinga]
- fix ledger export to quote account name in case of special characters (fix 215) [sdementen]
- fix ledger export to exclude "check commodity" when commodity is not a currency [sdementen]
- fix python 3.12 support (fix 212) [teeberg]
- fix yahoo import due to null values (fix 202) [JCPvanHooren]

Resources

• https://github.com/sdementen/piecash/pull/224/commits
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36039