Remote profile

Changes in R-devel Bug Fixes:
The internal method of ‘untar()’ now checks the whole path of every member, so that a final component of ‘".."’ or ‘"~"’ can no longer place a link or file outside the extraction directory; rejects hard- and symbolic-link targets restored as file copies, which resolve outside the extraction directory or pass through a symbolic link; applies the ‘umask’ to extracted files; also no longer restores ‘setuid’ or ‘setgid’ permission bits. Simi...
https://developer.r-project.org/blosxom.cgi/R-devel/NEWS/2026/10/24

Changes in R-devel Bug Fixes:
‘unzip(., unzip = "internal")’ no longer leaks the zip handle on error, thanks to Kevin Ushey, see PR#19233
https://developer.r-project.org/blosxom.cgi/R-devel/NEWS/2026/10/24

Changes in R-devel Bug Fixes:
‘delete.response’ inadvertently converted indices (attributes ‘response’, ‘offset’, ‘specials’) from integer to double. It also replaced ‘NULL’ components of ‘specials’ with ‘logical(0L)’.
https://developer.r-project.org/blosxom.cgi/R-devel/NEWS/2026/10/23

Changes in R-devel Bug Fixes:
The internal method of ‘untar()’ now checks the whole path of every member, so that a final component of ‘".."’ or ‘"~"’ can no longer place a link or file outside the extraction directory; rejects hard- and symbolic-link targets restored as file copies, which resolve outside the extraction directory or pass through a symbolic link; applies the umask to extracted files; also no longer restores setuid or setgid permission bits. Similarly,...
https://developer.r-project.org/blosxom.cgi/R-devel/NEWS/2026/10/23

Changes in R-devel Bug Fixes:
‘parse_Rd()’ should no longer leak memory when errors are raised, thanks to Kevin Ushey's report and patch in PR#19184.
https://developer.r-project.org/blosxom.cgi/R-devel/NEWS/2026/10/21

Changes in R 4.6.2 Bug Fixes:
‘KalmanLike(1:5, list(1,2))’ and similar no longer segfault, fixing PR#19217 thanks to Kevin Ushey and Adam Berkeš.
https://developer.r-project.org/blosxom.cgi/R-4-6-branch/NEWS/2026/10/20

Changes in R 4.6.2 Bug Fixes:
‘isoreg(numeric(0))’ no longer returns unallocated component ‘yc’, fixing PR#19224 thanks to Kevin Ushey.
https://developer.r-project.org/blosxom.cgi/R-4-6-branch/NEWS/2026/10/20

Changes in R 4.6.2 Bug Fixes:
If ‘wilcox.test(..., exact=TRUE)’'s p-value is close to the 0 or 1 boundaries, the calculation no longer suffers severely from cancellation, thanks to Tasuku Kobayashi's reports and Ahmed Sattar Jabbar's suggestion in PR#19144.
https://developer.r-project.org/blosxom.cgi/R-4-6-branch/NEWS/2026/10/20

Changes in R 4.6.1 Bug Fixes:
‘wilcox.test(x, exact=FALSE, correct = k)’'s p-value computation got a missing ‘dnorm(z)’ factor, and so did the 2-sample case, in addition to more fixes. Further, if ‘wilcox.test(.., exact=TRUE)’'s p-value is close to the 0 or 1 boundaries, the calculation no longer suffers severely from cancellation, thanks to Tasuku Kobayashi's reports and Ahmed Sattar Jabbar's suggestion in PR#19144.
https://developer.r-project.org/blosxom.cgi/R-4-6-branch/NEWS/2026/10/20

Changes in R-devel Bug Fixes:
Fixes for ‘grid.pack(row.after=)’ (and ‘row.before’ and ‘col.after’ and ‘col.before’) and ‘grid.pack(dynamic=TRUE)’. Thanks to Athenkosi Nkonyeni for reports.
https://developer.r-project.org/blosxom.cgi/R-devel/NEWS/2026/10/20