# CVE-2025-32798 - Conda Build

**URL:** <https://forum.anaconda.com/t/cve-2025-32798-conda-build/96475>\
**Category:** Technical Topics\
**Created:** [July 9, 2025, 3:44pm UTC](https://forum.anaconda.com/t/cve-2025-32798-conda-build/96475 "2025-07-09T15:44:51Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Vinay3](https://avatars.discourse-cdn.com/v4/letter/v/c2df01/32.png) [@Vinay3](https://forum.anaconda.com/u/Vinay3)\
**Post date:** [July 9, 2025, 3:44pm UTC](https://forum.anaconda.com/t/cve-2025-32798-conda-build/96475/1 "2025-07-09T15:44:51Z")

</div>

Hi team,

With regards to above CVE, I started updating my Conda environment following various online resources. I use community Anaconda distribution with some Python related workload running on it (Linux Host). I have not been successful to upgrade it using

conda update conda  
conda update conda-build

During the upgrade, it fails and errors out with warnings such as below and the progress stalls.

The environment is inconsistent, please check the package plan carefully  
The following packages are causing the inconsistency:

- defaults/linux-64::brotli-bin==1.0.9=h5eee18b\_7
- defaults/linux-64::brotli==1.0.9=h5eee18b\_7
- defaults/linux-64::libwebp==1.2.4=h11a3e52\_1
- defaults/linux-64::brunsli==0.1=h2531618\_0
- defaults/linux-64::typing-extensions==4.7.1=py311h06a4308\_0
- defaults/noarch::importlib\_metadata==6.0.0=hd3eb1b0\_0
- defaults/linux-64::qtwebkit==5.212=h4eab89a\_4
- defaults/noarch::argon2-cffi==21.3.0=pyhd3eb1b0\_0
- defaults/linux-64::jupyter\_server==1.23.4=py311h06a4308\_0
- defaults/linux-64::huggingface\_hub==0.15.1=py311h06a4308\_0
- defaults/linux-64::jupyter\_server\_fileid==0.9.0=py311h06a4308\_0
- defaults/linux-64::jupyterlab\_server==2.22.0=py311h06a4308\_0
- defaults/linux-64::notebook-shim==0.2.2=py311h06a4308\_0
- defaults/noarch::pooch==1.4.0=pyhd3eb1b0\_0
- defaults/linux-64::jupyter\_server\_ydoc==0.8.0=py311h06a4308\_1
- defaults/linux-64::nbclassic==0.5.5=py311h06a4308\_0
- defaults/linux-64::conda-build==3.26.0=py311h06a4308\_0
- defaults/linux-64::notebook==6.5.4=py311h06a4308\_1
- defaults/linux-64::anaconda-navigator==2.4.2=py311h06a4308\_0
- defaults/linux-64::jupyterlab==3.6.3=py311h06a4308\_0
- defaults/linux-64::jupyter==1.0.0=py311h06a4308\_8
- defaults/linux-64::imagecodecs==2021.8.26=py311hb63acbb\_2
- defaults/linux-64::pytorch==2.0.1=cpu\_py311h6d93b4c\_0
- defaults/linux-64::datasets==2.12.0=py311h06a4308\_0
- defaults/linux-64::panel==1.2.1=py311h06a4308\_0
- defaults/linux-64::transformers==4.29.2=py311h06a4308\_0
- defaults/linux-64::holoviews==1.17.0=py311h06a4308\_0
- defaults/linux-64::hvplot==0.8.4=py311h06a4308\_0
- defaults/linux-64::\_anaconda\_depends==2023.07=py311\_1
- defaults/linux-64::sqlalchemy==2.0.39=py311h00e1ef3\_0
- defaults/linux-64::pytables==3.10.1=py311h9d13977\_0

What’s the easiest way to upgrade conda and conda build to

```
      conda version : 25.5.1
conda-build version : 25.5.0

```

to remediate above CVE.