Re: [Rd] [External] Re: Patches for CVE-2024-27322

2024-04-30 Thread Tierney, Luke via R-devel
That should do it Sent from my iPad On Apr 30, 2024, at 9:57 AM, Iñaki Ucar wrote:  Many thanks both. I'll wait for Luke's confirmation to trigger the update with the backported fix. Iñaki On Tue, 30 Apr 2024 at 12:42, Dirk Eddelbuettel mailto:e...@debian.org>> wrote: On 30 April 2024 at

Re: [Rd] Patches for CVE-2024-27322

2024-04-30 Thread Iñaki Ucar
Many thanks both. I'll wait for Luke's confirmation to trigger the update with the backported fix. Iñaki On Tue, 30 Apr 2024 at 12:42, Dirk Eddelbuettel wrote: > > On 30 April 2024 at 11:59, peter dalgaard wrote: > | svn diff -c 86235 ~/r-devel/R > > Which is also available as > > https://githu

Re: [Rd] Patches for CVE-2024-27322

2024-04-30 Thread Dirk Eddelbuettel
On 30 April 2024 at 11:59, peter dalgaard wrote: | svn diff -c 86235 ~/r-devel/R Which is also available as https://github.com/r-devel/r-svn/commit/f7c46500f455eb4edfc3656c3fa20af61b16abb7 Dirk | (or 86238 for the port to the release branch) should be easily backported. | | (CC Luke in cas

Re: [Rd] Patches for CVE-2024-27322

2024-04-30 Thread peter dalgaard
svn diff -c 86235 ~/r-devel/R (or 86238 for the port to the release branch) should be easily backported. (CC Luke in case there is more to it) - pd > On 30 Apr 2024, at 11:28 , Iñaki Ucar wrote: > > Dear R-core, > > I just received notification of CVE-2024-27322 [1] in RedHat's Bugzilla. We

[Rd] Patches for CVE-2024-27322

2024-04-30 Thread Iñaki Ucar
Dear R-core, I just received notification of CVE-2024-27322 [1] in RedHat's Bugzilla. We updated R to v4.4.0 in Fedora rawhide, F40, EPEL9 and EPEL8, so no problem there. However, F38 and F39 will stay at v4.3.3, and I was wondering if there's a specific patch available, or if you could point me t