Am Wed, Jun 12, 2024 at 05:00:25PM -0500 schrieb Dirk Eddelbuettel: > > On 12 June 2024 at 23:46, Moritz Mühlenhoff wrote: > | Dirk Eddelbuettel wrote: > | > Just FYI the view of R Core (upstream) and the R Foundation (I'm on the > board) > | > is that this is a nothingburger. We would love for the CVE to be retracted > | > but nobody (among a team of volunteers) has time or energy to pursue this. > | > > | > See > https://blog.r-project.org/2024/05/10/statement-on-cve-2024-27322/index.html > | > for the official statement. > | > | JFTR, I've sent a request to mark this CVE as rejected, with a reference to > | the statement above. > > Fabulous!!! Any past experience whether this may succeed?
It often does, but takes up to a few weeks... We'll let you know if a reject appears in the CVE feed. Cheers, Moritz