# News on Lix Recent content in News on Lix This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## An exploitable integer overflow in Lix (CVE-2026-44028) DevFeed: [An exploitable integer overflow in Lix (CVE-2026-44028)]() Original publisher: [Read original article]() Published: 2026-05-05T00:00:00Z Content type: release Language: en Sources: [News on Lix]() Topics: [Security](), [Vulnerabilities](), [Exploit](), [Nix](), [Incident response]() Tags: [cve](), [exploit](), [hardening](), [incident-response](), [security](), [update]() ### AI overview Lix has an integer-overflow vulnerability assigned CVE-2026-44028. The issue can enable an out-of-bounds write through a specially crafted NAR archive, with exploitability depending on build type and ASLR defenses. Fixed versions are Lix 2.93.4, 2.94.2, and 2.95.2, and users are advised to update. ### Source excerpt Security researchers have found a security issue in Lix. This issue has been assigned CVE-2026-44028. Important note : The issues are different between Lix and CppNix but it seems there was confusion in MITRE who emitted the CVE and copied the wrong information which should have gone into the CppNix CVE, we are trying to update the CVE metadata. ## Announcing Lix 2.95 "Kakigōri" DevFeed: [Announcing Lix 2.95 "Kakigōri"]() Original publisher: [Read original article]() Published: 2026-03-25T00:00:00Z Content type: release Language: en Sources: [News on Lix]() Topics: [releases](), [Cap'n Proto](), [Remote Procedure Call (RPC)](), [Nix]() Tags: [bugfixes](), [documentation](), [improvements](), [performance](), [release](), [rpc](), [upgrade](), [version]() ### AI overview The Lix team announces version 2.95, "Kakigōri," a major release focused on bug fixes, quality-of-life improvements, documentation, performance, and continued integration with the Cap'n Proto RPC runtime. The article also describes upgrade guidance and ongoing work toward additional RPC protocols. ### Source excerpt We at the Lix team are proud to announce our sixth major release, version 2.95 "Kakigōri". This release focuses on long-awaited bugfixes, quality-of-life improvements, documentation, performance improvements and continued integration of Lix with the Cap'n'Proto remote procedure call runtime to replace the previous bespoke implementation. ## Announcing Lix 2.94 "Açaí na tigela" DevFeed: [Announcing Lix 2.94 "Açaí na tigela"]() Original publisher: [Read original article]() Published: 2025-11-18T00:00:00Z Content type: release Language: en Sources: [News on Lix]() Topics: [Remote Procedure Call (RPC)](), [Cap'n Proto](), [Protocol (disambiguation)](), [implementation](), [hooks](), [Logging]() Tags: [announce](), [bugfixes](), [hooks](), [improvements](), [logging](), [performance](), [release](), [rpc](), [version]() ### AI overview Lix 2.94 is a major release focused on bug fixes, quality-of-life and performance improvements, with initial integration of the Cap'n Proto RPC runtime to replace a bespoke implementation. It includes Cap'n Proto protocol definitions for build hooks and logging, enabling multiple build hook processes to wait concurrently. ### Source excerpt We at the Lix team are proud to announce our fifth major release, version 2.94 "Açaí na tigela". This release focuses on bugfixes, quality-of-life improvements, performance improvements and started integrating Lix with the Cap'n'Proto remote procedure call runtime, in order to replace the previous bespoke implementation. ## LixCon in 2026 DevFeed: [LixCon in 2026]() Original publisher: [Read original article]() Published: 2025-11-05T00:00:00Z Content type: release Language: en Sources: [News on Lix]() Topics: [Nix](), [Development]() Tags: [2026](), [announce](), [collaboration](), [conference](), [development](), [event](), [hacking]() ### AI overview LixCon 2026 will take place in Paris from April 17 to 19, 2026. The event will focus on the Lix interpreter and its internals, with talks on the first day followed by hands-on development, discussions, and collaboration. Attendance will be limited to 200 people. ### Source excerpt LixCon 2026 - this coming April, in Paris We won't bury the lede: we're super excited to announce that our first LixCon will take place from the 17th to 19th of April, 2026, in Paris! ## Lix Announces New Governance Model and Zulip Communications Space DevFeed: [Lix Announces New Governance Model and Zulip Communications Space]() Original publisher: [Read original article]() Published: 2025-10-13T00:00:00Z Content type: news Language: en Sources: [News on Lix]() Topics: [communications](), [Gerrit](), [Matrix]() Tags: [2025](), [blog-post](), [communications](), [community](), [gerrit](), [governance](), [matrix](), [news](), [updates]() ### AI overview Lix announces a new governance model with core, committer, and community teams. The project is also adopting Zulip for high-bandwidth discussions while continuing to use Matrix for chats and announcements. ### Source excerpt As Lix continues to evolve, we're excited to share some major updates that mark a new chapter in our journey. This blog post is the first of its kind: we want to give you a deeper look into the decisions, plans, and developments shaping the future of Lix. ## Critical correctness bug in Lix DevFeed: [Critical correctness bug in Lix]() Original publisher: [Read original article]() Published: 2025-06-27T00:00:00Z Content type: news Language: en Sources: [News on Lix]() Topics: [bug](), [incident](), [Nix](), [Linux](), [Deployment Tools]() Tags: [bug](), [critical](), [incident](), [linux]() ### AI overview A critical regression in Lix versions 2.91.2, 2.92.2, and 2.93.1 can cause missing or silently invalidated store paths during derivation builds. The incident has been mitigated; versions 2.91.3, 2.92.3, and 2.93.2 are identified as unaffected, with recovery guidance provided. ### Source excerpt This incident has been mitigated. This post will be updated with pointers on how to close it. The Lix team remains available over all support channels to help recovering any system affected by it. ## Fixes for five Lix CVEs DevFeed: [Fixes for five Lix CVEs]() Original publisher: [Read original article]() Published: 2025-06-24T00:00:00Z Content type: release Language: en Sources: [News on Lix]() Topics: [Security](), [Vulnerabilities](), [bug]() Tags: [cve](), [cves](), [release](), [security](), [updates]() ### AI overview Lix reports five security issues assigned CVE numbers and announces fixes in Lix 2.91, 2.92, and 2.93. The article summarizes the vulnerability chain, including temporary-directory handling and a recursive deletion bug. ### Source excerpt Security researchers have found five security issues in Lix. These issues were assigned CVE numbers: CVE-2025-46415 CVE-2025-46416 CVE-2025-52991 CVE-2025-52992 CVE-2025-52993 We have release updates to Lix 2. ## Announcing Lix 2.93 "Bici Bici" DevFeed: [Announcing Lix 2.93 "Bici Bici"]() Original publisher: [Read original article]() Published: 2025-05-06T00:00:00Z Content type: release Language: en Sources: [News on Lix]() Topics: [releases](), [Release notes](), [Nix](), [upgrade](), [deprecated](), [configuration]() Tags: [announce](), [asynchronous](), [bugfixes](), [configuration](), [deprecated](), [release](), [upgrade](), [version]() ### AI overview The Lix team announces version 2.93, a major release focused on bug fixes and continued integration with the KJ asynchronous runtime. The release also deprecates CR/CRLF line endings and literal NUL bytes in Nix expressions, which produce errors by default. ### Source excerpt We at the Lix team are proud to announce our fourth major release, version 2.93 "Bici Bici". This release focuses on bugfixes and continues integrating Lix with the KJ asynchronous runtime, in order to replace the previous bespoke implementation. ## Announcing Lix 2.92 "Bombe glacée" DevFeed: [Announcing Lix 2.92 "Bombe glacée"]() Original publisher: [Read original article]() Published: 2025-01-18T00:00:00Z Content type: release Language: en Sources: [News on Lix]() Topics: [Nix](), [Protocol (disambiguation)](), [async](), [C++](), [deprecated](), [configuration]() Tags: [announce](), [async](), [c-plus-plus](), [configuration](), [deprecated](), [improvements](), [protocol](), [release](), [version]() ### AI overview Lix 2.92 is a major release focused on evolving its evaluator and store, improving evaluator speed, and removing rarely used and troublesome Nix language features. It also reworks the daemon with asynchronous C++ code and begins deprecating problematic language features. ### Source excerpt We at the Lix team are proud to announce our third major release, version 2.92 "Bombe glacée". This release focuses on evolution work of the evaluator and store in order to be able to replace the Nix store protocol, to make the evaluator faster, and to remove rarely-used and troublesome features of the Nix language. ## Lix installations upgrading to macOS Sequoia require manual repair DevFeed: [Lix installations upgrading to macOS Sequoia require manual repair]() Original publisher: [Read original article]() Published: 2024-09-15T00:00:00Z Content type: article Language: en Sources: [News on Lix]() Topics: [macOS](), [Nix](), [upgrade]() Tags: [installation](), [macos](), [os](), [upgrade]() ### AI overview The article explains that upgrading macOS installations of Lix and Nix to macOS Sequoia can cause builds to fail because Apple claims user IDs used by the default Nix installation. It describes using the installer's repair functionality, including before the upgrade. ### Source excerpt macOS Sequoia release day is almost upon us, and that means all your Lix and Nix installations on macOS are going to break when you upgrade your OS. ## Announcing Lix 2.91 "Dragon's Breath" DevFeed: [Announcing Lix 2.91 "Dragon's Breath"]() Original publisher: [Read original article]() Published: 2024-08-12T00:00:00Z Content type: release Language: en Sources: [News on Lix]() Topics: [Nix](), [implementation](), [bug](), [Tooling]() Tags: [announce](), [bug](), [improvements](), [performance](), [release](), [tooling](), [version]() ### AI overview The Lix team announces version 2.91, "Dragon's Breath," a major release of the Nix implementation. The release includes bug fixes, performance improvements, refactorings, design changes, user-facing updates, and an experimental pipe operator. ### Source excerpt We at the Lix team are proud to announce our second major release, version 2.91 "Dragon's Breath". This release contains unspecified bug fixes and performance improvements--no of course we will tell you what is in it. ## Announcing Lix 2.90 "Vanilla Ice Cream" DevFeed: [Announcing Lix 2.90 "Vanilla Ice Cream"]() Original publisher: [Read original article]() Published: 2024-07-10T00:00:00Z Content type: release Language: en Sources: [News on Lix]() Topics: [Nix](), [Tooling](), [implementation]() Tags: [announce](), [bug-fixes](), [features](), [improvements](), [release](), [tooling](), [user-experience](), [version]() ### AI overview The Lix team announces Lix 2.90, its first release. The release focuses on reliability and foundations while adding Lix-specific features, performance improvements, more detailed error reporting, debugger fixes, and other user experience improvements. ### Source excerpt We at the Lix team are proud to announce our first release, version 2.90 "Vanilla Ice Cream". This release focuses on foundations and reliability, but nevertheless contains several small but exciting user-facing features that are exclusive to Lix.