This is an older version. The current version is 4.5.6768. Rtools 4.5.6768 · Released:
Installer files 4.4.6459
| Architecture | Type | Scope | File size | Download | SHA256 |
|---|---|---|---|---|---|
| 64-bit | EXE (Inno Setup) | All users | 451.6 MB | cloud.r-project.org | VirusTotal |
| ARM64 | EXE (Inno Setup) | All users | 486.6 MB | cloud.r-project.org | VirusTotal |
Link and SHA256 come from the Windows Package Manager community manifest. Compare the hash of the downloaded file before running it.
Release notes
Distributed as rtools44-6459-6401.exe and rtools44-aarch64-6459-6401.exe.
Package postgresql has been updated from version 13.18 to 13.20. This fixes security vulnerability CVE-2025-1094 in PostgreSQL. The vulnerability allows SQL injection and arbitrary code execution via crafted input data, involving strategically placed invalid UTF-8 characters. It could happen when input quoted by PostgreSQL is passed to the interactive PostgreSQL terminal tool, psql.exe, which is part of Rtools.
To safely avoid these atacks, R packages linking to PostgreSQL libraries can be re-installed using this version of Rtools. While probably unlikely, if any application directly used psql.exe from Rtools, this update can be installed to be on the safe side.
There is no other change in the toolchain nor libraries provided in this update. Like any update of Rtools, also this one includes the current build tools from Msys2, and those can be easily updated via pacman directly without installing an update of Rtools.https://cloud.r-project.org/bin/windows/Rtools/rtools44/news.html
