Elektrine lite

← Feed

@zekjur@mas.to

2026-05-01 08:54 UTC

For my fellow #NixOS users: To fix https://copy.fail/ (CVE-2026-31431) on NixOS 25.11, switch your Flake input to : nixpkgs.url = "github:nixos/nixpkgs/release-25.11"; (Until the `nixos-25.11` tag is updated, too.) See also https://discourse.nixos.org/t/is-nixos-affected-by-copy-fail-edit-yes-it-is/77317/26 for copy-pasteable instructions to check / fix / verify

Replies (4)

  • @leona@social.infinitespace.dev 2026-05-01 09:04

    @zekjur@mas.to nixos-25.11-small already has the fix since yesterday and more packages cached.

    Open ##2201985

  • @vbernat@hachyderm.io 2026-05-01 09:21

    @zekjur@mas.to Instead I have used this. This does not require a reboot: ```nix boot.extraModprobeConfig = '' install algif_aead /bin/false ''; ``` /bin/false does not exist, but it does not matter. It prevents autoloading of the faulty module.

    Open ##2201988

  • @totoroot@ibe.social 2026-05-01 14:11

    @zekjur@mas.to unstable should be fine with just updating my flake inputs, right?

    Open ##2201989

  • @vbernat@hachyderm.io 2026-05-03 07:49

    @zekjur@mas.to The fix is still not present in NixOS 25.11. This is one of the main drawbacks of the Nix ecosystem. Hopefully, there is always a workaround (including just overlaying the patch from GitHub to nixpkgs, e.g. https://github.com/vincentbernat/homemanager-configuration/commit/b0bdf1009f914e9b78d9fc103783dfc196648868 )

    Open ##2201991