Am Wed, Jun 12, 2024 at 05:00:25PM -0500 schrieb Dirk Eddelbuettel:
> 
> On 12 June 2024 at 23:46, Moritz Mühlenhoff wrote:
> | Dirk Eddelbuettel wrote:
> | > Just FYI the view of R Core (upstream) and the R Foundation (I'm on the 
> board)
> | > is that this is a nothingburger. We would love for the CVE to be retracted
> | > but nobody (among a team of volunteers) has time or energy to pursue this.
> | > 
> | > See 
> https://blog.r-project.org/2024/05/10/statement-on-cve-2024-27322/index.html 
> | > for the official statement.
> | 
> | JFTR, I've sent a request to mark this CVE as rejected, with a reference to
> | the statement above.
> 
> Fabulous!!!  Any past experience whether this may succeed?

It often does, but takes up to a few weeks...

We'll let you know if a reject appears in the CVE feed.

Cheers,
        Moritz

Reply via email to