Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.2
cleanstart miniforge3 may drop connections during secure handshake
published 14 days ago
Summary
The secure communication component in cleanstart miniforge3 can fail when a handshake message is paused part‑way through, causing the connection to be aborted. This may interrupt services that rely on encrypted links. Update to the latest version or apply the vendor’s patch to fix the issue.
What to do
- Update cleanstart miniforge3 to version 26.3.2.0-r2.
- Update cleanstart miniforge3 to version 26.3.2.3-r3.
- Update cleanstart miniforge3 to version 26.1.1.3-r2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | miniforge3 |
< 26.3.2.0-r2 < 26.3.2.3-r3 < 26.1.1.3-r2 Fix: upgrade to 26.3.2.0-r2
|
Original advisory text
Issue summary: The DTLS retransmission logic does not correctly handle
a handshake message write that is suspended part-way through
CVE-2026-84782 affects multiple packages. Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. See references for individual vulnerability details.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published22 Oct 2026
Updated22 Oct 2026
First seen22 Oct 2026
Sources
CLEANSTART-2026-VF53508 · OSV
Track software like this
Free during beta