Search results

25.3.x: get_selectors() still exposes unrestricted os module (CVE-2025-32798)

Status: Open.

#5969 In conda/conda-build;

· vulgraph opened on May 1, 2026

Backport CVE-2025-32800 (channel index path injection) to 24.11.x?

Status: Open.

#5968 In conda/conda-build;

· vulgraph opened on Apr 28, 2026

CVE-2025-32799 (tar path traversal in convert/render) not on 24.11.x

Status: Open.

#5967 In conda/conda-build;

· vulgraph opened on Apr 28, 2026

24.11.x: get_selectors still exposes full os module (CVE-2025-32798)

Status: Open.

#5966 In conda/conda-build;

· vulgraph opened on Apr 28, 2026

license files in pkg tarball not info tarball

type::bugdescribes erroneous operation, use severity::* to classify the typedescribes erroneous operation, use severity::* to classify the type

Status: Open.

#5956 In conda/conda-build;

· danpetry opened on Apr 21, 2026

Discovery: conda-build with conda-rattler-solver

type::featurerequest for a new feature or capabilityrequest for a new feature or capability

Status: Open.

#5954 In conda/conda-build;

· danyeaw opened on Apr 20, 2026

bypass_env_check=True silently drops run_exports → wrong package hash for virtual-package deps (e.g. __glibc)

Status: Open.

#5952 In conda/conda-build;

· nh13 opened on Apr 15, 2026

Enable dependabot for docs requirements

type::featurerequest for a new feature or capabilityrequest for a new feature or capability

Status: Open.

#5937 In conda/conda-build;

· danyeaw opened on Mar 24, 2026

CEP 28 implementation

type::bugdescribes erroneous operation, use severity::* to classify the typedescribes erroneous operation, use severity::* to classify the type

Status: Open.

#5925 In conda/conda-build;

· wolfv opened on Feb 19, 2026

BUG: conda_build.config.get_or_merge_config does not respect exclusive_config_file in presence of CONDA_* env vars

type::bugdescribes erroneous operation, use severity::* to classify the typedescribes erroneous operation, use severity::* to classify the type

Status: Open.

#5922 In conda/conda-build;

· h-vetinari opened on Feb 13, 2026

Replace deprecated numpy.distutils usage

type::featurerequest for a new feature or capabilityrequest for a new feature or capability

Status: Open.

#5911 In conda/conda-build;

· ryanskeith opened on Jan 30, 2026

Add network configuration for v1 recipe support

type::featurerequest for a new feature or capabilityrequest for a new feature or capability

Status: Open.

#5898 In conda/conda-build;

· danyeaw opened on Jan 15, 2026