Determinate Systems, Inc. | Status
Patched PHP security release
Determinate Secure Packages is now patched against today's announced PHP vulnerabilities. Please immediately update your Nix flakes to use the latest release.
For Flake URLs, see: https://docs.determinate.systems/secure-packages/#distributions
Please contact support if you have further questions: https://docs.determinate.systems/contact/
-
Oct 21, 2026 6:00 PM UTC · Monitoring
Determinate Secure Packages is now patched against today's announced PHP vulnerabilities. Please immediately update your Nix flakes to use the latest release.
For Flake URLs, see: https://docs.determinate.systems/secure-packages/#distributions
Please contact support if you have further questions: https://docs.determinate.systems/contact/
-
Oct 21, 2026 1:40 PM UTC · Identified
Upstream has disclosed the vulnerabilities: https://www.php.net/index.php#2026-10-21-5
We are applying patches to all affected versions and will announce a release soon.
-
Oct 21, 2026 1:38 PM UTC · Identified
Upstream has disclosed the vulnerabilities: https://www.php.net/index.php#2026-10-21-5
eMudhra Intermediate CA Compromise
Determinate Secure Packages is now patched to distrust the eMudhra Intermediate CAs. Please immediately update your Nix flakes to use the latest release. Our patches include updating vendored Rust programs with outdated certificate lists.
For Flake URLs, see: https://docs.determinate.systems/secure-packages/#distributions
We will continue monitoring and will send additional updates if more outdated and vendored certificates are identified.
Please contact support if you have further questions: https://docs.determinate.systems/contact/
FlakeHub Cache
· --% uptimeinstall.determinate.systems
· --% uptimeServes Determinate Nix and related software for initial bootstrapping and upgrades of the Determinate software suite.