Hi Guixers, This is an advanced notice of upcoming security disclosures and fixes. Vulnerabilities were identified by Snyk Security Labs which affect Guix, Nix, and Lix (their pre-announcement is at <https://discourse.nixos.org/t/pre-disclosure-announcement-security-advisory-for-nix-and-lix-on-june-24-2025/65831>). On June 24 at 14h UTC each project will release fixes for these issues and provide full technical details. This will be announced on our email lists along with a full write up on the Guix blog at that time.
An advanced thank you to everyone working hard behind the scenes in all of these projects! And my apologies for not cryptographically signing this email and keeping it brief as I'm currently on the road. As always, please bring any security concerns to the Guix Security Team, via guix-secur...@gnu.org. Thank you, John on behalf of the Security Team
