Repository navigation
eMudhra certificates in Docker image #16656
Description
Please, update Docker images to include fixes connected to eMudhra CA compromise
Source from NixOS/nixpkgs#576485 (comment)
{{ message }}
Please, update Docker images to include fixes connected to eMudhra CA compromise
Source from NixOS/nixpkgs#576485 (comment)
Activity
xokdvium commentedon Oct 21, 2026
This will need an update and cutting a point release. I had intended to backport the multiple nixpkgs bumps we've had to do to 2.35-maintenance branch once 26.05 advances sufficiently (haven't checked that it had). We will need to pick quite a few things to get there though. This should also pick up the recent libcurl fixes IIRC.
Although the docker image of course can (and should) be built with a custom nixpkgs to get the latest security fixes precisely because of such possibilities. The release binaries will regardless be a bit slower-moving due to the nature of the input pinning and the releases being versioned alongside nix and not nixpkgs.
xokdvium commentedon Oct 21, 2026
In the meantime what you can do is:
https://nixpk.gs/pr-tracker.html?pr=576347 hasn't hit unstable. However, when that does hit unstable it would just be:
xokdvium commentedon Oct 22, 2026
At least for 2.35 updating the pins is easy enough:
#16661
https://github.com/NixOS/nix/pkgs/container/nix/1431096097?tag=2.35.4
https://github.com/NixOS/nix/actions/runs/39854051163/job/120087505662