Untitled attachment

Notices where this attachment appears

1. Embed this notice
   Raito Bezarius (raito@nixos.paris)'s status on Thursday, 29-Jun-2023 11:53:40 JST Raito Bezarius

   PSA: https://github.com/NixOS/calamares-nixos-extensions/security/advisories/GHSA-3rvf-24q2-24ww

   If you installed #NixOS using the graphical *Calamares* installer on a non EFI system with a LUKS rootfs or have any LUKS partition which is not a rootfs.

   Your LUKS encryption key has been exposed in the /boot partition, potentially unencrypted or encrypted via GRUB cryptodisk.

   We consider this to be a serious vulnerability and we are disclosing it immediately as it was found in the Heads project.

   We are exploring automatic remediation in https://github.com/NixOS/nixpkgs/pull/240411.