Re: [R] Current version of R, 4.4.0 and patch to correct the bug fix related to the RStudio viewer pane on Windows systems

2024-05-16 Thread Vega, Ann (she/her/hers) via R-help
ent: Thursday, May 16, 2024 1:38 PM To: Vega, Ann (she/her/hers) Cc: R-help@r-project.org Subject: Re: [R] Current version of R, 4.4.0 and patch to correct the bug fix related to the RStudio viewer pane on Windows systems Caution: This email originated from outside EPA, please exercise additi

Re: [R] Current version of R, 4.4.0 and patch to correct the bug fix related to the RStudio viewer pane on Windows systems

2024-05-16 Thread Ben Bolker
Yes, but this sounds more like a bureaucratic requirement ("all available patches must be installed") and less like something someone has thought through. It's conceivable that one might be able to talk to a security officer and convince them that this is not in fact an important issue, bu

Re: [R] Current version of R, 4.4.0 and patch to correct the bug fix related to the RStudio viewer pane on Windows systems

2024-05-16 Thread CALUM POLWART
Do you receive RDS objects from unknown (untrusted) sources? ?? If not - the security issue is a non-issue as I understand it. On Thu, 16 May 2024, 16:21 Vega, Ann (she/her/hers) via R-help, < r-help@r-project.org> wrote: > I help to coordinate the USEPA's R user group. We have over 500 member

Re: [R] Current version of R, 4.4.0 and patch to correct the bug fix related to the RStudio viewer pane on Windows systems

2024-05-16 Thread Duncan Murdoch
The developer.r-project.org site lists plans for releases, and no plan is in place yet for a 4.4.1 release. You can look at the history of previous versions if you want to make a guess: 4.3.1: June, 2023 4.2.1: June, 2022 4.1.1: August, 2021 4.0.1: June, 2020 3.6.1: July, 2019 3.5.1: July, 20

[R] Current version of R, 4.4.0 and patch to correct the bug fix related to the RStudio viewer pane on Windows systems

2024-05-16 Thread Vega, Ann (she/her/hers) via R-help
I help to coordinate the USEPA's R user group. We have over 500 members and our security officer has required us to update to R version 4.4.0 because of the security vulnerability to versions prior. However, we cannot download the patched version because it does not have a signed certificate a