Lix Project @lix_project@chaos.social
Public

Security pre-disclosure:

A critical security advisory for and (and ) will be published tomorrow at 14:00 UTC.

If you're building untrusted derivations, you must upgrade to ensure your systems remain secure.

Lix versions 2.91, 2.92, 2.93, and main will receive upgrades on all known channels to Lix. Lix 2.90 WILL NOT receive upgrades.

More details are available in the pre-disclosure post:
discourse.nixos.org/t/pre-disc

Please stay alert for the full announcement tomorrow at 14:00 UTC.

Pre-disclosure announcement: Security Advisory for Nix and Lix on June 24, 2025

Hello everyone, This post is a pre-disclosure announcement for upcoming security releases of Nix and Lix. The Snyk Security Labs team has identified and reported the vulnerabilities that will be fixed by these releases. Disclosure and Release Details Release Date: June 24, 2025 at 14:00 UTC Both Nix and Lix are affected Branch releases that will receive the fixes: Nix: 2.24, 2.26, 2.28 and 2.29 Lix: 2.91, 2.92 and 2.93 All systems building untrusted derivations are impacted. Both Linux a...

discourse.nixos.org · NixOS Discourse

0
0
0

If you have a fediverse account, you can quote this note from your own instance. Search https://chaos.social/users/lix_project/statuses/114734644491350261 on your instance and quote it. (Note that quoting is not supported in Mastodon.)