Page Comparison

As from the ARCC -Announcement that went out on the 23rd of May 2024:

Here are several announcements about the vulnerability: 

• CERT/CC Reports R Programming Language Vulnerability

• Vulnerability Note VU#238194 : “A vulnerability in the R language that allows for arbitrary code to be executed directly after the deserialization of untrusted data has been discovered. This vulnerability can be exploited through RDS (R Data Serialization) format files and .rdx files. An attacker can create malicious RDS or .rdx formatted files to execute arbitrary commands on the victim's target device.”

We encourage all of our R users to migrate to R version 4.4.0, and off of prior versions of R (4.3.x or earlier) at your earliest convenience. To assist you with this migration we have installed modules for R version 4.4.0 on the Beartooth HPC Environment:

• r/4.4.0

• r-rmpi/0.7-1-ompi-r4.4

These modules are available via the “module …” commands as well as in OnDemand. The R/4.4.0 module is now the default R module on Beartooth, Loren and Wildiris HPC Clusters and will be the only R module available on MedicineBow. These modules include the R packages we typically included in our earlier R modules. If you have installed any libraries yourself you will need to re-install those libraries in R version 4.4.0, as those installations are version-specific.

We intend to disable ARCC’s older R modules on Beartooth by Friday June 28th, 2024.

If you have installed your own copy of R, via conda or some other method, you are welcome to use ARCC’s R modules.  We encourage you to upgrade your personally installed version of R to 4.4.0.

Regards the announcement: Executive Summary: Updating compiler on Medicine. loading r/4.4.0 using the gcc/13.2.0 compiler you will see the following warning:

[]$ module load gcc/13.2.0 r/4.4.0
-------------------------------------------------------------------------------
The following dependent module(s) are not currently loaded: zlib-ng/2.1.4_zen4 (required by: gcc/13.2.0), zstd/1.5.5_zen4__programs_True (required by: gcc/13.2.0)
-------------------------------------------------------------------------------

This warning can be ignored.

But, we recommend that you use the gcc/14.2.0 version to removing this warning.