Hello everyone, Recently, we get vulnerability fixes on Guix-daemon, as announced on the Guix blog: https://guix.gnu.org/en/blog/2026/guix-substitute-pull-vulnerabilities/
A big thank you to everyone who has worked on it. Do you know if the different installation methods of Guix and Guix System will install the vulnerable or fixed version of Guix-daemon ? For the methods listed here: https://guix.gnu.org/en/download/ They will all provide the version 1.5.0 of Guix and Guix System, so probably the vulnerable version of Guix-daemon ? For the methods listed here: https://guix.gnu.org/en/download/latest/ Do they provide all the fixed version of Guix-daemon ? For the method suggested on the manual, there is a bash script to download: https://guix.gnu.org/guix-install.sh After executing it, does the user get the fixed version of Guix-daemon ? I probably forget other method of installation. But if you get information about it, don't hesitate to share it. Best regards ------- Gendre Sébastien
signature.asc
Description: PGP signature
