Dirk Eddelbuettel wrote:
> Just FYI the view of R Core (upstream) and the R Foundation (I'm on the board)
> is that this is a nothingburger. We would love for the CVE to be retracted
> but nobody (among a team of volunteers) has time or energy to pursue this.
> 
> See 
> https://blog.r-project.org/2024/05/10/statement-on-cve-2024-27322/index.html 
> for the official statement.

JFTR, I've sent a request to mark this CVE as rejected, with a reference to
the statement above.

Cheers,
        Moritz

Reply via email to