Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.3
cleanstart/miniforge3 slows down when QUIC packets arrive out of order
published 14 days ago
Summary
The miniforge3 distribution from cleanstart can become increasingly slow when it receives QUIC network traffic whose packets are not in the expected order. This slowdown can affect the responsiveness of applications that rely on fast data transfer. Update to the latest version of miniforge3 or apply the vendor’s recommended patch to restore normal performance.
What to do
- Update cleanstart miniforge3 to version 26.1.1.3-r2.
- Update cleanstart miniforge3 to version 26.3.2.0-r2.
- Update cleanstart miniforge3 to version 26.3.2.3-r3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | miniforge3 |
< 26.1.1.3-r2 < 26.3.2.0-r2 < 26.3.2.3-r3 Fix: upgrade to 26.1.1.3-r2
|
Original advisory text
Issue summary: The QUIC stream reassembly algorithm performance deteriorates
progressively as packets are arriving out of order
CVE-2026-42772 affects multiple packages. Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. See references for individual vulnerability details.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published22 Oct 2026
Updated22 Oct 2026
First seen22 Oct 2026
Sources
CLEANSTART-2026-DX09334 · OSV
Track software like this
Free during beta