CLEANSTART-2026-ST09171: Security fix for GHSA-6v7p-g79w-8964 applied in: miniforge3 25.11.0.1-r6
Security vulnerability affects the miniforge3 package. This issue is resolved in later releases. See references for vulnerability details.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/miniforge3to a version that resolves this vulnerability.Fixed in 25.11.0.1-r6 - Upgrade
Upgrade
miniforge3to a version that resolves this vulnerability.Fixed in 25.11.0.1-r6
Frequently Asked Questions
Which deployments should be prioritized for remediation?
Prioritize any deployment of the cleanstart/miniforge3 package that has not been updated to miniforge3 25.11.0.1-r6 or a later release. The issue is rated high severity with network-reachable, low-complexity exploitation and no required privileges or user interaction.
What attacker access is required to exploit this issue?
The supplied vector indicates that exploitation can be performed over the network, requires low attack complexity, and does not require prior privileges or user interaction. Successful exploitation affects availability; no confidentiality or integrity impact is specified.
How can I determine whether a system is affected?
Check the installed version of cleanstart/miniforge3. Systems running a release earlier than 25.11.0.1-r6 should be treated as affected, since the security fix is applied in 25.11.0.1-r6 and later releases.