Approved changes feed: RSS · Atom

cpe:2.3:a:anaconda:anaconda3:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorAnaconda (3b46250f-37c4-5689-8080-4097943a18fc)
ProductAnaconda3 (97dd9cb1-1619-58cd-a3e5-1d9b98f18fae)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-35845 vulnerable 2026-06-08 06:06:27.889428 Details available
Anaconda 3 2023.03-1-Linux allows local users to disrupt TLS certificate validation by modifying the cacert.pem file used by the installed pip program. This occurs because many files are installed as world-writable on Linux, ignoring umask, even when these files are installed as root. Miniconda is also affected.
Published: 2023-09-11T00:00:00.000Z
Updated: 2024-09-26T15:00:22.497Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.