Daniel Lakeland <[email protected]> writes: > If you have a guix system that is up to date and need to install a new system > you can use the 1.5.0 installer on the new system, set up the new > system to receive deployments from the up to date system and then guix deploy > the update to the new system from the up to date system... This > seems like it should be relatively safe as the up to date system is the one > verifying the substitutes.
But, the 1.5.0 Guix System install will use its Guix-daemon to install the new system. And this daemon is still vulnerable.
signature.asc
Description: PGP signature
