On 25 June 2024 at 21:32, Moritz Mühlenhoff wrote: | Am Wed, Jun 12, 2024 at 05:00:25PM -0500 schrieb Dirk Eddelbuettel: | > | > On 12 June 2024 at 23:46, Moritz Mühlenhoff wrote: | > | Dirk Eddelbuettel wrote: | > | > Just FYI the view of R Core (upstream) and the R Foundation (I'm on the board) | > | > is that this is a nothingburger. We would love for the CVE to be retracted | > | > but nobody (among a team of volunteers) has time or energy to pursue this. | > | > | > | > See https://blog.r-project.org/2024/05/10/statement-on-cve-2024-27322/index.html | > | > for the official statement. | > | | > | JFTR, I've sent a request to mark this CVE as rejected, with a reference to | > | the statement above. | > | > Fabulous!!! Any past experience whether this may succeed? | | It often does, but takes up to a few weeks... | | We'll let you know if a reject appears in the CVE feed.
Huge thank you in advance for keeping an eye on this one! Dirk -- dirk.eddelbuettel.com | @eddelbuettel | e...@debian.org
