devxy/r-builds
Watch
2
0
Fork
You've already forked r-builds
 0
Code Issues 1 Pull requests Releases Activity

CVE-2024-27322: update NEWS.Rd

Browse source 
At install time the other NEWS files will be
re-generated from NEWS.Rd.

To check if your R version is patched, search for
'CVE-2024-27322' in the NEWS. From the command line:
```
grep -C 5 CVE-2024-27322 /opt/R/4.0.0/lib/R/doc/NEWS
```

From R:
```
options(browser = "false")
news(grepl("CVE-2024-27322", Text))
```
This commit is contained in:
Gábor Csárdi 2024-05-17 12:50:35 +02:00
commit 42f8c4bd77
18 changed files with 283 additions and 238 deletions
Download patch file Download diff file Expand all files Collapse all files

28
builder/patches/R-4.0.0.patch
View file

@ -45,18 +45,20 @@ index a389f71311..a190fbf8f3 100644
SEXP object, icon, type, ver, fun; SEXP object, icon, type, ver, fun;
object = CAR(args); args = CDR(args); object = CAR(args); args = CDR(args);
icon = CAR(args); args = CDR(args); icon = CAR(args); args = CDR(args);
diff --git a/doc/NEWS b/doc/NEWS diff --git a/doc/NEWS.Rd b/doc/NEWS.Rd
index 1e5bc60..1ce0c7b 100644 index 094396b..75fae89 100644
--- a/doc/NEWS --- a/doc/NEWS.Rd
+++ b/doc/NEWS +++ b/doc/NEWS.Rd
@@ -1,5 +1,10 @@ @@ -6,6 +6,12 @@
R News \encoding{UTF-8}
+CHANGES IN POSIT'S BUILD FROM https://github.com/rstudio/r-builds \section{\Rlogo CHANGES IN 4.0.0}{
+ + \subsection{CHANGES IN POSIT'S BUILD FROM \url{https://github.com/rstudio/r-builds}}{
+ * readRDS() and unserialize() now signal an error instead of returning a PROMSXP, + \itemize{
+ to fix CVE-2024-27322. + \item readRDS() and unserialize() now signal an error instead of
+ + returning a PROMSXP, to fix CVE-2024-27322.
CHANGES IN 4.0.0: + }
+ }
SIGNIFICANT USER-VISIBLE CHANGES: \subsection{SIGNIFICANT USER-VISIBLE CHANGES}{
\itemize{

28
builder/patches/R-4.0.1.patch
View file

@ -45,18 +45,20 @@ index a389f71311..a190fbf8f3 100644
SEXP object, icon, type, ver, fun; SEXP object, icon, type, ver, fun;
object = CAR(args); args = CDR(args); object = CAR(args); args = CDR(args);
icon = CAR(args); args = CDR(args); icon = CAR(args); args = CDR(args);
diff --git a/doc/NEWS b/doc/NEWS diff --git a/doc/NEWS.Rd b/doc/NEWS.Rd
index 8cd0e5c..10e38db 100644 index 9417774..5a7fa23 100644
--- a/doc/NEWS --- a/doc/NEWS.Rd
+++ b/doc/NEWS +++ b/doc/NEWS.Rd
@@ -1,5 +1,10 @@ @@ -6,6 +6,12 @@
R News \encoding{UTF-8}
+CHANGES IN POSIT'S BUILD FROM https://github.com/rstudio/r-builds \section{\Rlogo CHANGES IN R 4.0.1}{
+ + \subsection{CHANGES IN POSIT'S BUILD FROM \url{https://github.com/rstudio/r-builds}}{
+ * readRDS() and unserialize() now signal an error instead of returning a PROMSXP, + \itemize{
+ to fix CVE-2024-27322. + \item readRDS() and unserialize() now signal an error instead of
+ + returning a PROMSXP, to fix CVE-2024-27322.
CHANGES IN R 4.0.1: + }
+ }
NEW FEATURES: \subsection{NEW FEATURES}{
\itemize{

28
builder/patches/R-4.0.2.patch
View file

@ -45,18 +45,20 @@ index a389f71311..a190fbf8f3 100644
SEXP object, icon, type, ver, fun; SEXP object, icon, type, ver, fun;
object = CAR(args); args = CDR(args); object = CAR(args); args = CDR(args);
icon = CAR(args); args = CDR(args); icon = CAR(args); args = CDR(args);
diff --git a/doc/NEWS b/doc/NEWS diff --git a/doc/NEWS.Rd b/doc/NEWS.Rd
index 502ee68..704deb0 100644 index 4c45f26..69285cd 100644
--- a/doc/NEWS --- a/doc/NEWS.Rd
+++ b/doc/NEWS +++ b/doc/NEWS.Rd
@@ -1,5 +1,10 @@ @@ -6,6 +6,12 @@
R News \encoding{UTF-8}
+CHANGES IN POSIT'S BUILD FROM https://github.com/rstudio/r-builds \section{\Rlogo CHANGES IN R 4.0.2}{
+ + \subsection{CHANGES IN POSIT'S BUILD FROM \url{https://github.com/rstudio/r-builds}}{
+ * readRDS() and unserialize() now signal an error instead of returning a PROMSXP, + \itemize{
+ to fix CVE-2024-27322. + \item readRDS() and unserialize() now signal an error instead of
+ + returning a PROMSXP, to fix CVE-2024-27322.
CHANGES IN R 4.0.2: + }
+ }
UTILITIES: \subsection{UTILITIES}{
\itemize{

28
builder/patches/R-4.0.3.patch
View file

@ -45,18 +45,20 @@ index a389f71311..a190fbf8f3 100644
SEXP object, icon, type, ver, fun; SEXP object, icon, type, ver, fun;
object = CAR(args); args = CDR(args); object = CAR(args); args = CDR(args);
icon = CAR(args); args = CDR(args); icon = CAR(args); args = CDR(args);
diff --git a/doc/NEWS b/doc/NEWS diff --git a/doc/NEWS.Rd b/doc/NEWS.Rd
index 7983a71..16c6674 100644 index 916961a..521a1fd 100644
--- a/doc/NEWS --- a/doc/NEWS.Rd
+++ b/doc/NEWS +++ b/doc/NEWS.Rd
@@ -1,5 +1,10 @@ @@ -6,6 +6,12 @@
R News \encoding{UTF-8}
+CHANGES IN POSIT'S BUILD FROM https://github.com/rstudio/r-builds \section{\Rlogo CHANGES IN R 4.0.3}{
+ + \subsection{CHANGES IN POSIT'S BUILD FROM \url{https://github.com/rstudio/r-builds}}{
+ * readRDS() and unserialize() now signal an error instead of returning a PROMSXP, + \itemize{
+ to fix CVE-2024-27322. + \item readRDS() and unserialize() now signal an error instead of
+ + returning a PROMSXP, to fix CVE-2024-27322.
CHANGES IN R 4.0.3: + }
+ }
NEW FEATURES: \subsection{NEW FEATURES}{
\itemize{

28
builder/patches/R-4.0.4.patch
View file

@ -45,18 +45,20 @@ index a389f71311..a190fbf8f3 100644
SEXP object, icon, type, ver, fun; SEXP object, icon, type, ver, fun;
object = CAR(args); args = CDR(args); object = CAR(args); args = CDR(args);
icon = CAR(args); args = CDR(args); icon = CAR(args); args = CDR(args);
diff --git a/doc/NEWS b/doc/NEWS diff --git a/doc/NEWS.Rd b/doc/NEWS.Rd
index ceaf22c..0688cd2 100644 index ec44c62..510dadc 100644
--- a/doc/NEWS --- a/doc/NEWS.Rd
+++ b/doc/NEWS +++ b/doc/NEWS.Rd
@@ -1,5 +1,10 @@ @@ -6,6 +6,12 @@
R News \encoding{UTF-8}
+CHANGES IN POSIT'S BUILD FROM https://github.com/rstudio/r-builds \section{\Rlogo CHANGES IN R 4.0.4}{
+ + \subsection{CHANGES IN POSIT'S BUILD FROM \url{https://github.com/rstudio/r-builds}}{
+ * readRDS() and unserialize() now signal an error instead of returning a PROMSXP, + \itemize{
+ to fix CVE-2024-27322. + \item readRDS() and unserialize() now signal an error instead of
+ + returning a PROMSXP, to fix CVE-2024-27322.
CHANGES IN R 4.0.4: + }
+ }
NEW FEATURES: \subsection{NEW FEATURES}{
\itemize{

30
builder/patches/R-4.0.5.patch
View file

@ -45,18 +45,20 @@ index a389f71311..a190fbf8f3 100644
SEXP object, icon, type, ver, fun; SEXP object, icon, type, ver, fun;
object = CAR(args); args = CDR(args); object = CAR(args); args = CDR(args);
icon = CAR(args); args = CDR(args); icon = CAR(args); args = CDR(args);
diff --git a/doc/NEWS b/doc/NEWS diff --git a/doc/NEWS.Rd b/doc/NEWS.Rd
index b20a8ee..7ed2d27 100644 index 5640a16..5bebf9e 100644
--- a/doc/NEWS --- a/doc/NEWS.Rd
+++ b/doc/NEWS +++ b/doc/NEWS.Rd
@@ -1,5 +1,10 @@ @@ -6,6 +6,12 @@
R News \encoding{UTF-8}
+CHANGES IN POSIT'S BUILD FROM https://github.com/rstudio/r-builds \section{\Rlogo CHANGES IN R 4.0.5}{
+ + \subsection{CHANGES IN POSIT'S BUILD FROM \url{https://github.com/rstudio/r-builds}}{
+ * readRDS() and unserialize() now signal an error instead of returning a PROMSXP, + \itemize{
+ to fix CVE-2024-27322. + \item readRDS() and unserialize() now signal an error instead of
+ + returning a PROMSXP, to fix CVE-2024-27322.
CHANGES IN R 4.0.5: + }
+ }
BUG FIXES: \subsection{BUG FIXES}{
\itemize{
\item The change to the internal table in \R 4.0.4 for

30
builder/patches/R-4.1.0.patch
View file

@ -45,18 +45,20 @@ index a389f71311..a190fbf8f3 100644
SEXP object, icon, type, ver, fun; SEXP object, icon, type, ver, fun;
object = CAR(args); args = CDR(args); object = CAR(args); args = CDR(args);
icon = CAR(args); args = CDR(args); icon = CAR(args); args = CDR(args);
diff --git a/doc/NEWS b/doc/NEWS diff --git a/doc/NEWS.Rd b/doc/NEWS.Rd
index 39cdf12..d162c18 100644 index 2fcc2e7..f0ed95b 100644
--- a/doc/NEWS --- a/doc/NEWS.Rd
+++ b/doc/NEWS +++ b/doc/NEWS.Rd
@@ -1,5 +1,10 @@ @@ -6,6 +6,12 @@
R News \encoding{UTF-8}
+CHANGES IN POSIT'S BUILD FROM https://github.com/rstudio/r-builds \section{\Rlogo CHANGES IN R 4.1.0}{
+ + \subsection{CHANGES IN POSIT'S BUILD FROM \url{https://github.com/rstudio/r-builds}}{
+ * readRDS() and unserialize() now signal an error instead of returning a PROMSXP, + \itemize{
+ to fix CVE-2024-27322. + \item readRDS() and unserialize() now signal an error instead of
+ + returning a PROMSXP, to fix CVE-2024-27322.
CHANGES IN R 4.1.0: + }
+ }
FUTURE DIRECTIONS: \subsection{FUTURE DIRECTIONS}{
\itemize{
\item It is planned that the 4.1.x series will be the last to

29
builder/patches/R-4.1.1.patch
View file

@ -45,18 +45,21 @@ index a389f71311..a190fbf8f3 100644
SEXP object, icon, type, ver, fun; SEXP object, icon, type, ver, fun;
object = CAR(args); args = CDR(args); object = CAR(args); args = CDR(args);
icon = CAR(args); args = CDR(args); icon = CAR(args); args = CDR(args);
diff --git a/doc/NEWS b/doc/NEWS diff --git a/doc/NEWS.Rd b/doc/NEWS.Rd
index b58c1e2..96c03e7 100644 index 8515986..760dccb 100644
--- a/doc/NEWS --- a/doc/NEWS.Rd
+++ b/doc/NEWS +++ b/doc/NEWS.Rd
@@ -1,5 +1,10 @@ @@ -6,6 +6,13 @@
R News \encoding{UTF-8}
+CHANGES IN POSIT'S BUILD FROM https://github.com/rstudio/r-builds \section{\Rlogo CHANGES IN R 4.1.1}{
+ \subsection{CHANGES IN POSIT'S BUILD FROM \url{https://github.com/rstudio/r-builds}}{
+ \itemize{
+ \item readRDS() and unserialize() now signal an error instead of
+ returning a PROMSXP, to fix CVE-2024-27322.
+ }
+ }
+ +
+ * readRDS() and unserialize() now signal an error instead of returning a PROMSXP, \subsection{NEW FEATURES}{
+ to fix CVE-2024-27322. \itemize{
+ \item \code{require(\var{pkg}, quietly = TRUE)} is quieter and in
CHANGES IN R 4.1.1:
NEW FEATURES:

30
builder/patches/R-4.1.2.patch
View file

@ -45,18 +45,20 @@ index a389f71311..a190fbf8f3 100644
SEXP object, icon, type, ver, fun; SEXP object, icon, type, ver, fun;
object = CAR(args); args = CDR(args); object = CAR(args); args = CDR(args);
icon = CAR(args); args = CDR(args); icon = CAR(args); args = CDR(args);
diff --git a/doc/NEWS b/doc/NEWS diff --git a/doc/NEWS.Rd b/doc/NEWS.Rd
index ec745b3..0a3929b 100644 index 90c8408..d24571b 100644
--- a/doc/NEWS --- a/doc/NEWS.Rd
+++ b/doc/NEWS +++ b/doc/NEWS.Rd
@@ -1,5 +1,10 @@ @@ -6,6 +6,12 @@
R News \encoding{UTF-8}
+CHANGES IN POSIT'S BUILD FROM https://github.com/rstudio/r-builds \section{\Rlogo CHANGES IN R 4.1.2}{
+ + \subsection{CHANGES IN POSIT'S BUILD FROM \url{https://github.com/rstudio/r-builds}}{
+ * readRDS() and unserialize() now signal an error instead of returning a PROMSXP, + \itemize{
+ to fix CVE-2024-27322. + \item readRDS() and unserialize() now signal an error instead of
+ + returning a PROMSXP, to fix CVE-2024-27322.
CHANGES IN R 4.1.2: + }
+ }
C-LEVEL FACILITIES: \subsection{C-LEVEL FACILITIES}{
\itemize{
\item The workaround in headers \file{R.h} and \file{Rmath.h}

29
builder/patches/R-4.1.3.patch
View file

@ -45,18 +45,21 @@ index a389f71311..a190fbf8f3 100644
SEXP object, icon, type, ver, fun; SEXP object, icon, type, ver, fun;
object = CAR(args); args = CDR(args); object = CAR(args); args = CDR(args);
icon = CAR(args); args = CDR(args); icon = CAR(args); args = CDR(args);
diff --git a/doc/NEWS b/doc/NEWS diff --git a/doc/NEWS.Rd b/doc/NEWS.Rd
index a93a043..59d0dc8 100644 index 8b4e587..b4f145e 100644
--- a/doc/NEWS --- a/doc/NEWS.Rd
+++ b/doc/NEWS +++ b/doc/NEWS.Rd
@@ -1,5 +1,10 @@ @@ -6,6 +6,13 @@
R News \encoding{UTF-8}
+CHANGES IN POSIT'S BUILD FROM https://github.com/rstudio/r-builds \section{\Rlogo CHANGES IN R 4.1.3}{
+ \subsection{CHANGES IN POSIT'S BUILD FROM \url{https://github.com/rstudio/r-builds}}{
+ \itemize{
+ \item readRDS() and unserialize() now signal an error instead of
+ returning a PROMSXP, to fix CVE-2024-27322.
+ }
+ }
+ +
+ * readRDS() and unserialize() now signal an error instead of returning a PROMSXP, \subsection{NEW FEATURES}{
+ to fix CVE-2024-27322. \itemize{
+ \item The default version of Bioconductor has been changed to
CHANGES IN R 4.1.3:
NEW FEATURES:

30
builder/patches/R-4.2.0.patch
View file

@ -45,18 +45,20 @@ index a389f71311..a190fbf8f3 100644
SEXP object, icon, type, ver, fun; SEXP object, icon, type, ver, fun;
object = CAR(args); args = CDR(args); object = CAR(args); args = CDR(args);
icon = CAR(args); args = CDR(args); icon = CAR(args); args = CDR(args);
diff --git a/doc/NEWS b/doc/NEWS diff --git a/doc/NEWS.Rd b/doc/NEWS.Rd
index 690d0d4..91658c3 100644 index 62f25ae..82dfac6 100644
--- a/doc/NEWS --- a/doc/NEWS.Rd
+++ b/doc/NEWS +++ b/doc/NEWS.Rd
@@ -1,5 +1,10 @@ @@ -6,6 +6,12 @@
R News \encoding{UTF-8}
+CHANGES IN POSIT'S BUILD FROM https://github.com/rstudio/r-builds \section{\Rlogo CHANGES IN R 4.2.0}{
+ + \subsection{CHANGES IN POSIT'S BUILD FROM \url{https://github.com/rstudio/r-builds}}{
+ * readRDS() and unserialize() now signal an error instead of returning a PROMSXP, + \itemize{
+ to fix CVE-2024-27322. + \item readRDS() and unserialize() now signal an error instead of
+ + returning a PROMSXP, to fix CVE-2024-27322.
CHANGES IN R 4.2.0: + }
+ }
SIGNIFICANT USER-VISIBLE CHANGES: \subsection{SIGNIFICANT USER-VISIBLE CHANGES}{
\itemize{
\item The \code{formula} method of \code{aggregate()} now matches

29
builder/patches/R-4.2.1.patch
View file

@ -45,18 +45,21 @@ index a389f71311..a190fbf8f3 100644
SEXP object, icon, type, ver, fun; SEXP object, icon, type, ver, fun;
object = CAR(args); args = CDR(args); object = CAR(args); args = CDR(args);
icon = CAR(args); args = CDR(args); icon = CAR(args); args = CDR(args);
diff --git a/doc/NEWS b/doc/NEWS diff --git a/doc/NEWS.Rd b/doc/NEWS.Rd
index 238859d..3c8f99f 100644 index 630c88f..3504a87 100644
--- a/doc/NEWS --- a/doc/NEWS.Rd
+++ b/doc/NEWS +++ b/doc/NEWS.Rd
@@ -1,5 +1,10 @@ @@ -6,6 +6,13 @@
R News \encoding{UTF-8}
+CHANGES IN POSIT'S BUILD FROM https://github.com/rstudio/r-builds \section{\Rlogo CHANGES IN R 4.2.1}{
+ \subsection{CHANGES IN POSIT'S BUILD FROM \url{https://github.com/rstudio/r-builds}}{
+ \itemize{
+ \item readRDS() and unserialize() now signal an error instead of
+ returning a PROMSXP, to fix CVE-2024-27322.
+ }
+ }
+ +
+ * readRDS() and unserialize() now signal an error instead of returning a PROMSXP, \subsection{NEW FEATURES}{
+ to fix CVE-2024-27322. \itemize{
+ \item New function \code{utils::findCRANmirror()} to find out if a
CHANGES IN R 4.2.1:
NEW FEATURES:

29
builder/patches/R-4.2.2.patch
View file

@ -45,18 +45,21 @@ index a389f71311..a190fbf8f3 100644
SEXP object, icon, type, ver, fun; SEXP object, icon, type, ver, fun;
object = CAR(args); args = CDR(args); object = CAR(args); args = CDR(args);
icon = CAR(args); args = CDR(args); icon = CAR(args); args = CDR(args);
diff --git a/doc/NEWS b/doc/NEWS diff --git a/doc/NEWS.Rd b/doc/NEWS.Rd
index 08256d2..9dbe631 100644 index b52627e..aee4475 100644
--- a/doc/NEWS --- a/doc/NEWS.Rd
+++ b/doc/NEWS +++ b/doc/NEWS.Rd
@@ -1,5 +1,10 @@ @@ -6,6 +6,13 @@
R News \encoding{UTF-8}
+CHANGES IN POSIT'S BUILD FROM https://github.com/rstudio/r-builds \section{\Rlogo CHANGES IN R 4.2.2}{
+ \subsection{CHANGES IN POSIT'S BUILD FROM \url{https://github.com/rstudio/r-builds}}{
+ \itemize{
+ \item readRDS() and unserialize() now signal an error instead of
+ returning a PROMSXP, to fix CVE-2024-27322.
+ }
+ }
+ +
+ * readRDS() and unserialize() now signal an error instead of returning a PROMSXP, \subsection{NEW FEATURES}{
+ to fix CVE-2024-27322. \itemize{
+ \item \code{tools::Rdiff(useDiff = TRUE)} checks for the presence
CHANGES IN R 4.2.2:
NEW FEATURES:

29
builder/patches/R-4.2.3.patch
View file

@ -45,18 +45,21 @@ index a389f71311..a190fbf8f3 100644
SEXP object, icon, type, ver, fun; SEXP object, icon, type, ver, fun;
object = CAR(args); args = CDR(args); object = CAR(args); args = CDR(args);
icon = CAR(args); args = CDR(args); icon = CAR(args); args = CDR(args);
diff --git a/doc/NEWS b/doc/NEWS diff --git a/doc/NEWS.Rd b/doc/NEWS.Rd
index a30f7d3..d914b72 100644 index fe2a646..986e83d 100644
--- a/doc/NEWS --- a/doc/NEWS.Rd
+++ b/doc/NEWS +++ b/doc/NEWS.Rd
@@ -1,5 +1,10 @@ @@ -6,6 +6,13 @@
R News \encoding{UTF-8}
+CHANGES IN POSIT'S BUILD FROM https://github.com/rstudio/r-builds \section{\Rlogo CHANGES IN R 4.2.3}{
+ \subsection{CHANGES IN POSIT'S BUILD FROM \url{https://github.com/rstudio/r-builds}}{
+ \itemize{
+ \item readRDS() and unserialize() now signal an error instead of
+ returning a PROMSXP, to fix CVE-2024-27322.
+ }
+ }
+ +
+ * readRDS() and unserialize() now signal an error instead of returning a PROMSXP, \subsection{C-LEVEL FACILITIES}{
+ to fix CVE-2024-27322. \itemize{
+ \item The definition of \code{DL_FUNC} in \file{R_ext/Rdynload.h}
CHANGES IN R 4.2.3:
C-LEVEL FACILITIES:

29
builder/patches/R-4.3.0.patch
View file

@ -45,18 +45,21 @@ index a389f71311..a190fbf8f3 100644
SEXP object, icon, type, ver, fun; SEXP object, icon, type, ver, fun;
object = CAR(args); args = CDR(args); object = CAR(args); args = CDR(args);
icon = CAR(args); args = CDR(args); icon = CAR(args); args = CDR(args);
diff --git a/doc/NEWS b/doc/NEWS diff --git a/doc/NEWS.Rd b/doc/NEWS.Rd
index 2e83bc3..185f45f 100644 index 2fd50d5..6b24e71 100644
--- a/doc/NEWS --- a/doc/NEWS.Rd
+++ b/doc/NEWS +++ b/doc/NEWS.Rd
@@ -1,5 +1,10 @@ @@ -6,6 +6,13 @@
R News \encoding{UTF-8}
+CHANGES IN POSIT'S BUILD FROM https://github.com/rstudio/r-builds \section{\Rlogo CHANGES IN R 4.3.0}{
+ \subsection{CHANGES IN POSIT'S BUILD FROM \url{https://github.com/rstudio/r-builds}}{
+ \itemize{
+ \item readRDS() and unserialize() now signal an error instead of
+ returning a PROMSXP, to fix CVE-2024-27322.
+ }
+ }
+ +
+ * readRDS() and unserialize() now signal an error instead of returning a PROMSXP, \subsection{SIGNIFICANT USER-VISIBLE CHANGES}{
+ to fix CVE-2024-27322. \itemize{
+ \item Calling \code{&&} or \code{||} with LHS or (if evaluated) RHS of
CHANGES IN R 4.3.0:
SIGNIFICANT USER-VISIBLE CHANGES:

29
builder/patches/R-4.3.1.patch
View file

@ -45,18 +45,21 @@ index a389f71311..a190fbf8f3 100644
SEXP object, icon, type, ver, fun; SEXP object, icon, type, ver, fun;
object = CAR(args); args = CDR(args); object = CAR(args); args = CDR(args);
icon = CAR(args); args = CDR(args); icon = CAR(args); args = CDR(args);
diff --git a/doc/NEWS b/doc/NEWS diff --git a/doc/NEWS.Rd b/doc/NEWS.Rd
index 317399c..4235d4d 100644 index 5ca6489..62db476 100644
--- a/doc/NEWS --- a/doc/NEWS.Rd
+++ b/doc/NEWS +++ b/doc/NEWS.Rd
@@ -1,5 +1,10 @@ @@ -6,6 +6,13 @@
R News \encoding{UTF-8}
+CHANGES IN POSIT'S BUILD FROM https://github.com/rstudio/r-builds \section{\Rlogo CHANGES IN R 4.3.1}{
+ \subsection{CHANGES IN POSIT'S BUILD FROM \url{https://github.com/rstudio/r-builds}}{
+ \itemize{
+ \item readRDS() and unserialize() now signal an error instead of
+ returning a PROMSXP, to fix CVE-2024-27322.
+ }
+ }
+ +
+ * readRDS() and unserialize() now signal an error instead of returning a PROMSXP, \subsection{C-LEVEL FACILITIES}{
+ to fix CVE-2024-27322. \itemize{
+ \item The C-level API version of \R's \code{integrate()},
CHANGES IN R 4.3.1:
C-LEVEL FACILITIES:

29
builder/patches/R-4.3.2.patch
View file

@ -45,18 +45,21 @@ index a389f71311..a190fbf8f3 100644
SEXP object, icon, type, ver, fun; SEXP object, icon, type, ver, fun;
object = CAR(args); args = CDR(args); object = CAR(args); args = CDR(args);
icon = CAR(args); args = CDR(args); icon = CAR(args); args = CDR(args);
diff --git a/doc/NEWS b/doc/NEWS diff --git a/doc/NEWS.Rd b/doc/NEWS.Rd
index ae99650..8c618d8 100644 index dd59f87..f3abe02 100644
--- a/doc/NEWS --- a/doc/NEWS.Rd
+++ b/doc/NEWS +++ b/doc/NEWS.Rd
@@ -1,5 +1,10 @@ @@ -6,6 +6,13 @@
R News \encoding{UTF-8}
+CHANGES IN POSIT'S BUILD FROM https://github.com/rstudio/r-builds \section{\Rlogo CHANGES IN R 4.3.2}{
+ \subsection{CHANGES IN POSIT'S BUILD FROM \url{https://github.com/rstudio/r-builds}}{
+ \itemize{
+ \item readRDS() and unserialize() now signal an error instead of
+ returning a PROMSXP, to fix CVE-2024-27322.
+ }
+ }
+ +
+ * readRDS() and unserialize() now signal an error instead of returning a PROMSXP, \subsection{NEW FEATURES}{
+ to fix CVE-2024-27322. \itemize{
+ \item The default initialization of the \code{"repos"} option
CHANGES IN R 4.3.2:
NEW FEATURES:

29
builder/patches/R-4.3.3.patch
View file

@ -45,18 +45,21 @@ index a389f71311..a190fbf8f3 100644
SEXP object, icon, type, ver, fun; SEXP object, icon, type, ver, fun;
object = CAR(args); args = CDR(args); object = CAR(args); args = CDR(args);
icon = CAR(args); args = CDR(args); icon = CAR(args); args = CDR(args);
diff --git a/doc/NEWS b/doc/NEWS diff --git a/doc/NEWS.Rd b/doc/NEWS.Rd
index 7effa64..88f396d 100644 index 25bdb12..7456662 100644
--- a/doc/NEWS --- a/doc/NEWS.Rd
+++ b/doc/NEWS +++ b/doc/NEWS.Rd
@@ -1,5 +1,10 @@ @@ -7,6 +7,13 @@
R News \encoding{UTF-8}
+CHANGES IN POSIT'S BUILD FROM https://github.com/rstudio/r-builds \section{\Rlogo CHANGES IN R 4.3.3}{
+ \subsection{CHANGES IN POSIT'S BUILD FROM \url{https://github.com/rstudio/r-builds}}{
+ \itemize{
+ \item readRDS() and unserialize() now signal an error instead of
+ returning a PROMSXP, to fix CVE-2024-27322.
+ }
+ }
+ +
+ * readRDS() and unserialize() now signal an error instead of returning a PROMSXP, \subsection{NEW FEATURES}{
+ to fix CVE-2024-27322. \itemize{
+ \item \code{iconv()} now fixes up variant encoding names such as
CHANGES IN R 4.3.3:
NEW FEATURES: