40
How the xz backdoor highlights a major flaw in Nix | Shade's Blog
(shadeyg56.vercel.app)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 03 Apr 2024
40 points (100.0% liked)
Nix / NixOS
2192 readers
2 users here now
Main links
Videos
founded 2 years ago
MODERATORS
If the issue had been critical, then the branch head could be rolled back, causing everyone to downgrade
That's a nice idea in theory but not possible in practice as the last Nixpkgs revision without a tainted version of xz is many months old. You'd trade one CVE for dozens of others.