Determinate Systems, Inc. | Status
eMudhra Intermediate CA Compromise
Thu, 22 Oct 2026 21:05:18 UTC:
Determinate Nix v3.24.0 is now available via the determinate flake, https://flakehub.com/f/DeterminateSystems/determinate/3.24.0. Users managing their Determinate version via the flake, including NixOS users, can now update.
Run nix flake update to update your flake inputs and then update your system as normal.
Further artifacts, such as an updated installer and macOS package, are currently pending.
For questions, concerns, or more details, please contact us via support@determinate.systems.
-
Oct 22, 2026 9:05 PM UTC · Monitoring
Thu, 22 Oct 2026 21:05:18 UTC:
Determinate Nix v3.24.0 is now available via the determinate flake, https://flakehub.com/f/DeterminateSystems/determinate/3.24.0. Users managing their Determinate version via the flake, including NixOS users, can now update.
Run nix flake update to update your flake inputs and then update your system as normal.
Further artifacts, such as an updated installer and macOS package, are currently pending.
For questions, concerns, or more details, please contact us via support@determinate.systems. -
Oct 22, 2026 8:55 PM UTC · Monitoring
We are releasing an update to Determinate Nix which removes the compromised certificates from the CA bundle that is included in Determinate Nix. Additionally for macOS users, the Determinate Nix daemon will automatically exclude the compromised certificates even if they are present in the system keychain.
Thu, 22 Oct 2026 20:40:06 UTC:
Determinate Nix v3.24.0 is now available and is proceeding through our normal release cycle. That release cycle typically takes one hour. During that time, we will gradually increase the percentage of users who receive the new version.
If you would like to upgrade existing installations on macOS or other imperatively managed systems immediately, you can run this command:
sudo determinate-nixd upgrade --version v3.24.0
Further artifacts, such as an updated installer and macOS package, are currently pending.
For questions, concerns, or more details, please contact us via support@determinate.systems. -
Oct 21, 2026 1:26 PM UTC · Monitoring
Determinate Secure Packages is now patched to distrust the eMudhra Intermediate CAs. Please immediately update your Nix flakes to use the latest release. Our patches include updating vendored Rust programs with outdated certificate lists.
For Flake URLs, see: https://docs.determinate.systems/secure-packages/#distributions
We will continue monitoring and will send additional updates if more outdated and vendored certificates are identified.
Please contact support if you have further questions: https://docs.determinate.systems/contact/
Patched PHP security release
Determinate Secure Packages is now patched against today's announced PHP vulnerabilities. Please immediately update your Nix flakes to use the latest release.
For Flake URLs, see: https://docs.determinate.systems/secure-packages/#distributions
Please contact support if you have further questions: https://docs.determinate.systems/contact/
FlakeHub Cache
· --% uptimeinstall.determinate.systems
· --% uptimeServes Determinate Nix and related software for initial bootstrapping and upgrades of the Determinate software suite.