Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.bugs.dist > #1200724

Bug#1073061: r-base: CVE-2024-27322 execution of arbitrary code

From Dirk Eddelbuettel <edd@debian.org>
Newsgroups linux.debian.bugs.dist
Subject Bug#1073061: r-base: CVE-2024-27322 execution of arbitrary code
Date 2024-06-13 00:10 +0200
Message-ID <IOEki-2tmP-39@gated-at.bofh.it> (permalink)
References <IOyeR-2ptu-5@gated-at.bofh.it> <IOyyd-2pAa-3@gated-at.bofh.it> <IOE0V-2sVq-11@gated-at.bofh.it> <IOyeR-2ptu-5@gated-at.bofh.it> <IOE0V-2sVq-11@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On 12 June 2024 at 23:46, Moritz Mühlenhoff wrote:
| Dirk Eddelbuettel wrote:
| > Just FYI the view of R Core (upstream) and the R Foundation (I'm on the board)
| > is that this is a nothingburger. We would love for the CVE to be retracted
| > but nobody (among a team of volunteers) has time or energy to pursue this.
| > 
| > See https://blog.r-project.org/2024/05/10/statement-on-cve-2024-27322/index.html 
| > for the official statement.
| 
| JFTR, I've sent a request to mark this CVE as rejected, with a reference to
| the statement above.

Fabulous!!!  Any past experience whether this may succeed?

Thanks so much (and of course for everything else you do on security).

Dirk

-- 
dirk.eddelbuettel.com | @eddelbuettel | edd@debian.org

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Bug#1073061: r-base: CVE-2024-27322 execution of arbitrary code Vincent Danjean <vdanjean@debian.org> - 2024-06-12 17:40 +0200
  Bug#1073061: r-base: CVE-2024-27322 execution of arbitrary code Dirk Eddelbuettel <edd@debian.org> - 2024-06-12 18:00 +0200
    Bug#1073061: r-base: CVE-2024-27322 execution of arbitrary code Moritz Mühlenhoff <jmm@inutil.org> - 2024-06-12 23:50 +0200
      Bug#1073061: r-base: CVE-2024-27322 execution of arbitrary code Dirk Eddelbuettel <edd@debian.org> - 2024-06-13 00:10 +0200
        Bug#1073061: r-base: CVE-2024-27322 execution of arbitrary code Moritz Mühlenhoff <jmm@inutil.org> - 2024-06-25 21:40 +0200
          Bug#1073061: r-base: CVE-2024-27322 execution of arbitrary code Dirk Eddelbuettel <edd@debian.org> - 2024-06-25 22:50 +0200

csiph-web