There is a dedicated mailing list to keep track of security releases. To subscribe either visit the nix-security-announce Google Group or send an email to nix-security-announce+subscribe@googlegroups.com with the subject "subscribe".
These announcements will be signed by a member of the NixOS Security Team:
Graham Christensen
graham@grahamc.com
GPG Key:
0xFE918C3A98C1030F
GPG Fingerprint:
BA94 FDF1 1DA4 0521 2864 C121 FE91 8C3A 98C1 030F
Franz Pletz
fpletz@fnordicwalking.de
GPG Key:
0x846FDED7792617B4
GPG Fingerprint:
8A39 615D CE78 AF08 2E23 F303 846F DED7 7926 17B4
Domen Kožar
domen@dev.si
GPG Key:
0xC2FFBCAFD2C24246
GPG Fingerprint:
E96C 15A0 8D17 CE3B 17B0 C7AB C2FF BCAF D2C2 4246
Rob Vermaas
rob.vermaas@gmail.com
GPG Key:
0xE114A5F264A8AE8E
GPG Fingerprint:
96BF 75A5 3DEE 1F21 5F0C 979C E114 A5F2 64A8 AE8E
To privately report a security issue with NixOS, Nix, and its ecosystem, please mail anyone (or everyone) on the NixOS Security Team and we will ensure the issue is handled.
NixOS