Updated 04:00
Determinate Secure Packages distributions
Determinate Secure Packages ships both as a rolling distribution that follows Nixpkgs as it moves, and as versioned distributions built on one Nixpkgs release each and supported for years. We track every Common Vulnerabilities and Exposures record (CVE) separately in every distribution it affects, so the same CVE appears once per distribution, and we fix it in each one.
3 supported distributions
secure-packages-rolling
SupportedFIPS supportedBuilt on Nixpkgs master
- Fixed (30d)
- 234
- Fixed (7d)
- 119
- In progress
- 370
See 604 tracked CVEs
secure-packages-26.05
SupportedFIPS supportedLTSBuilt on Nixpkgs 26.05
- Fixed (30d)
- 525
- Fixed (7d)
- 284
- In progress
- 334
See 859 tracked CVEs
secure-packages-25.11
SupportedBuilt on Nixpkgs 25.11
- Fixed (30d)
- 418
- Fixed (7d)
- 302
- In progress
- 98
See 516 tracked CVEs
Planned distributions
secure-packages-26.11
PlannedWill be built on Nixpkgs 26.11
secure-packages-27.05
PlannedWill be built on Nixpkgs 27.05
secure-packages-27.11
PlannedWill be built on Nixpkgs 27.11
secure-packages-28.05
PlannedLTSWill be built on Nixpkgs 28.05
Glossary
| Term | Meaning |
|---|---|
| Supported | Available for use in production environments and covered by our standard service-level agreement (SLA) |
| FIPS supported | A distribution with Federal Information Processing Standards (FIPS) mode enabled is available for government and other regulated workloads |
| LTS | Receives 60 months of long-term support (LTS), with optional extended support after that |
Make CVE remediation our job, not yours.
Tell us what you run. We'll show you what Determinate Secure Packages covers, how the SLA applies, and how to get started.
Learn more
Support calendar
The support timeline for each distribution.
/calendar
Package update policy (opens in a new tab)
How we handle packages we can't patch in place, like browser engines and kernels.
docs.determinate.systems
Determinate Secure Packages overview (opens in a new tab)
What you get, how it fits your Nix setup, and how to start.
determinate.systems
Supply chain security (opens in a new tab)
Control over the code, dependencies, builds, and environments behind every system you run.
determinate.systems