CLEANSTART-2026-KB79457: setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages
Security vulnerability affects the miniforge3 package. setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/miniforge3to a version that resolves this vulnerability.Fixed in 25.11.0.1-r6
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates network-based exploitation with low attack complexity. An attacker needs low-level privileges, but no user interaction is required.
What is the potential impact if exploitation succeeds?
The reported CVSS vector rates confidentiality, integrity, and availability impact as high. Successful exploitation could therefore affect data disclosure, modification, and service availability.
How can I determine whether my installation is affected or whether an update fixes it?
The provided advisory identifies cleanstart/miniforge3 as affected, but does not provide affected versions, fixed versions, or remediation details. Version-based exposure and upgrade status cannot be determined from the supplied information.