CVE-2024-4603

Advisory

Notolog 1.0.2 updates its dependency 'cryptography' to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Added
- Added the index of searched text occurrences within the document, alongside the count of such occurrences. This enhancement provides more detailed search results and helps users locate text more precisely.

Changed
- Extracted SearchForm from the ToolBar class into a separate file and updated relevant lexeme names for case-sensitive search.

Updated
- Updated themes to enhance the document's search field, ensuring compatibility with the new functionality.
- Upgraded the `cryptography` package dependency from version '42.0.7' to '43.0.1' or later to incorporate the latest security improvements.
- Updated tests, particularly for the ToolBar and SearchForm classes.

Fixed
- Adjusted the searched occurrence counter to respond to the case-sensitive search checkbox for accurate results.

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603