CVE-2024-3651

Advisory

Piecash has updated the `idna` package from version 2.10 to 3.7 to address CVE-2024-3651.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

~~~~~~~~~~~~~~~~~~~~~~~~~~

- bumping dependencies to fix security issues
- fix ability to get to TXN from Invoice (and Lot) [Jared Kipe]
- fix migration to SA1.4 (fix 165) [kapinga]
- fix ledger export to quote account name in case of special characters (fix 215) [sdementen]
- fix ledger export to exclude "check commodity" when commodity is not a currency [sdementen]
- fix python 3.12 support (fix 212) [teeberg]
- fix yahoo import due to null values (fix 202) [JCPvanHooren]

Resources

• https://github.com/sdementen/piecash/pull/222/commits/779cc7c34ba398393f54dd57c1535a44e20ae5ec
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3651