Merge pull request #107 from nhs-r-community/r-security

Added alert
nhs-r-community · Apr 30, 2024 · 450102b · 450102b
2 parents 535e0d1 + ee1574b
commit 450102b
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/technical-r.qmd b/technical-r.qmd
@@ -1,5 +1,12 @@
 # Technical guidance - R {#tech-r}
 
+:::{.callout-important collapse=false appearance='default' icon=true}
+## R vulnerability
+Published 29 April 2024 related to versions of R prior to 4.4.0  <https://nvd.nist.gov/vuln/detail/CVE-2024-27322>. 
+
+Remdial action suggested is to upgrade to 4.4.0 and only open rds files from trusted sources.
+:::
+
 ## What programs are required for a computer
 
 To write R code you will need the [R program](https://cran.r-project.org/bin/windows/base/), an IDE (Integrated Development Environment) like [RStudio](https://posit.co/download/rstudio-desktop/) or [VSCode](https://code.visualstudio.com/) and (for Windows) the [RTools](https://cran.r-project.org/bin/windows/Rtools/) program.