Skip to content

nix.flake: update 25.11 input - #1194

Open
sarcasticadmin wants to merge 1 commit into
masterfrom
rh/260506022929
Open

nix.flake: update 25.11 input#1194
sarcasticadmin wants to merge 1 commit into
masterfrom
rh/260506022929

Conversation

@sarcasticadmin

@sarcasticadmin sarcasticadmin commented May 6, 2026

Copy link
Copy Markdown
Member

Description of PR

Fixes #1193

https://discourse.nixos.org/t/security-advisory-local-privilege-escalation-in-lix-and-nix/77407

This fix currently only fixes dev-server since its the only configuration using 25.11

Previous Behavior

  • previous version of nix was vulnerable

New Behavior

  • version of nix is not vulnerable

Tests

Confirming fixed version for nix on dev-server after nixos-rebuild and reboot (new kernel):

[rob@dev-server:~]$ uname -a
Linux dev-server 6.18.26 #1-NixOS SMP PREEMPT_DYNAMIC Thu Apr 30 09:13:53 UTC 2026 x86_64 GNU/Linux

[rob@dev-server:~]$ nix --version
nix (Nix) 2.31.5

Flake lock file updates:

• Updated input 'nixpkgs-2511':
    'github:NixOS/nixpkgs/a4bf06618f0b5ee50f14ed8f0da77d34ecc19160?narHash=sha256-AIiMJiqvGrN4HyLEbKAoCSRRYn0rnlW5VbKNIMIYqm4%3D' (2026-04-25)
  → 'github:NixOS/nixpkgs/0c88e1f2bdb93d5999019e99cb0e61e1fe2af4c5?narHash=sha256-q/nkKLDtHIyLjZpKhWk3cSK5IYsFqtMd6UtXF3ddjgA%3D' (2026-05-05)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

patch nix: GHSA-vh5x-56v6-4368 for all nixosConfigurations

1 participant