Hackers' Pub

Hackers’ Pub

Syntax	Description	Examples
`"` keyword `"`	Finds the string within quotes, including spaces. Case-insensitive. (Escape quotes inside with `\"`)	`"Hackers' Pub"`
`from:` handle	Finds content written by the specified user.	`from:hongminhee` `from:hongminhee@hollo.social`
`lang:` ISO 639-1	Finds content written in the specified language.	`lang:en`
`#` tag	Finds content with the specified tag. Case-insensitive.	`#HackersPub`
condition condition	Finds content that satisfies both conditions on either side of the space (logical AND).	`"Hackers' Pub" lang:en`
condition `OR` condition	Finds content that satisfies at least one of the conditions on either side of the OR operator (logical OR).	`#HackersPub OR "Hackers' Pub" lang:en`
`(` condition `)`	Combines the operators within the parentheses first.	`(#HackersPub OR "Hackers' Pub" OR "Hackers Pub") lang:en`

Lix Project @lix_project@chaos.social

6/23/2025, 8:48:58 PM

Public

Security pre-disclosure:

A critical security advisory for #Nix and #Lix (and #Guix) will be published tomorrow at 14:00 UTC.

If you're building untrusted derivations, you must upgrade to ensure your systems remain secure.

Lix versions 2.91, 2.92, 2.93, and main will receive upgrades on all known channels to Lix. Lix 2.90 WILL NOT receive upgrades.

More details are available in the pre-disclosure post:
https://discourse.nixos.org/t/pre-disclosure-announcement-security-advisory-for-nix-and-lix-on-june-24-2025/65831

Please stay alert for the full announcement tomorrow at 14:00 UTC.

Pre-disclosure announcement: Security Advisory for Nix and Lix on June 24, 2025

Hello everyone, This post is a pre-disclosure announcement for upcoming security releases of Nix and Lix. The Snyk Security Labs team has identified and reported the vulnerabilities that will be fixed by these releases. Disclosure and Release Details Release Date: June 24, 2025 at 14:00 UTC Both Nix and Lix are affected Branch releases that will receive the fixes: Nix: 2.24, 2.26, 2.28 and 2.29 Lix: 2.91, 2.92 and 2.93 All systems building untrusted derivations are impacted. Both Linux a...

discourse.nixos.org · NixOS Discourse

Lix Project @lix_project@chaos.social

6/24/2025, 3:21:00 PM

Public

Lix releases are now out, please upgrade. A detailed writeup about the issue and the mitigations is at https://lix.systems/blog/2025-06-24-lix-cves/, scroll a bit down for for instructions on how to protect yourselves.

See also the Discourse announcement post at https://discourse.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017, which also links to the various Nixpkgs PRs for those that use Lix from Nixpkgs.

#Nix #Lix

Fixes for five Lix CVEs

Security researchers have found five security issues in Lix. These issues were assigned CVE numbers: CVE-2025-46415 CVE-2025-46416 CVE-2025-52991 CVE-2025-52992 CVE-2025-52993 We have release updates to Lix 2.

lix.systems · Lix

If you have a fediverse account, you can quote this note from your own instance. Search https://chaos.social/users/lix_project/statuses/114739017172456643 on your instance and quote it. (Note that quoting is not supported in Mastodon.)