Skip to content
← All distributions

Updated 22:00

Determinate Secure Packages distribution

secure-packages-rollingSupportedFIPS supportedContinuous

Built on Nixpkgs as it moves. Available for use in production environments and covered by our standard service-level agreement (SLA).

Fixed within SLA

210

last 30 days

Fixed within SLA

24

last 7 days

Open

27

not yet fixed but still within SLA

Overdue

0

open

Missed SLA

0

last 30 days

Use this distribution

Customers only

Determinate Secure Packages is available through FlakeHub to organizations with access. Not a customer yet? Get in touch to gain access or schedule a demo.

Email sales@determinate.systems

Standardflake.nix

{
  inputs.nixpkgs.url = "https://flakehub.com/f/DeterminateSystems/secure-packages-rolling/0";
}
FIPS variant

FIPS variantflake.nix

{
  inputs.nixpkgs.url = "https://flakehub.com/f/DeterminateSystems/secure-packages-rolling-fips/0";
}

In the FIPS variant, every covered package is compliant with Federal Information Processing Standards (FIPS). Using the FIPS variant has the details.

237 CVEs tracked

CVEStatusSeveritySummaryClock startedDeadlineFixedTime to fix
Fixed within SLALowSkia uninitialized use in Chrome <151.0.7922.109 leaks cross-origin data after renderer compromise via crafted HTMLAug 10, 2026Nov 8, 2026Aug 11, 20261 day
Fixed within SLALowChrome <151.0.7922.109 Skia uninitialized use leaks cross-origin data post-renderer compromiseAug 10, 2026Nov 8, 2026Aug 11, 20261 day
Fixed within SLAHighUse-after-free in Chrome Views before 151.0.7922.109 enables remote heap corruption via crafted HTML, UI gesturesAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAHighWindows Chrome pre-151.0.7922.109 Views use-after-free allows heap corruption via crafted HTMLAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLACriticalCritical ANGLE out-of-bounds write enables sandbox escape via crafted HTML in Chrome Android <151.0.7922.109Aug 10, 2026Aug 17, 2026Aug 11, 20261 day
Fixed within SLAHighHigh-severity Google Chrome Base heap buffer overflow pre-151.0.7922.109 via malicious extensionAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAHighUse-after-free in Chrome Payments (<151.0.7922.109) enables sandbox escape from compromised rendererAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAHighCritical use-after-free in Skia enables sandbox escape in Chrome Android <151.0.7922.109 via HTMLAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAHighPre-151.0.7922.109 Chrome Workers input validation flaw enabled site isolation bypass via crafted HTMLAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAHighInsufficient navigation policy in Chrome <151.0.7922.109 allows renderer sandbox escape via crafted HTMLAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAHighChrome V8 use-after-free enables sandboxed RCE via crafted HTML, high severity (pre-151.0.7922.109)Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAHighV8 in Chrome <151.0.7922.109 allows sandboxed RCE via crafted HTML pageAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLACriticalCritical UAF in Chrome Aura on Linux enables remote sandbox escape via crafted HTML pre-151.0.7922.109Aug 10, 2026Aug 17, 2026Aug 11, 20261 day
Fixed within SLAHighChrome Linux GPU OOB write allows sandbox escape via crafted HTML (pre-151.0.7922.109)Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAMediumUninitialized GPU use in Chrome Android leaks process memory via crafted HTML (pre-151.0.7922.109)Aug 10, 2026Sep 24, 2026Aug 11, 20261 day
Fixed within SLAHighChrome <151.0.7922.109 Translate use-after-free allows sandboxed RCE via crafted HTMLAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAHighChrome Android WebAPK input validation flaw enables local sandbox escape via malicious fileAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAHighChrome Android pre-151.0.7922.109 Resources use-after-free enables sandbox escape from compromised renderer via crafted HTML pageAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAHighChrome GPU use-after-free <151.0.7922.109 allows sandbox escape from compromised renderer via HTMLAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAHighWindows Chrome CredentialProvider race allows local privilege escalation via malicious file pre-151.0.7922.109Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAHighChrome CrashReporting heap overflow enables sandbox escape with renderer compromise (pre-151.0.7922.109)Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAHighWebGL use-after-free allows sandbox escape post-renderer-compromise in Chrome Android <151.0.7922.109Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAMediumWindows Chrome Updater bug allows local UI spoofing via malicious file pre-151.0.7922.72Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLACriticalTint implementation flaw in Chrome Mac before 151.0.7922.72 allows sandbox escape via crafted HTMLAug 5, 2026Aug 12, 2026Aug 11, 20266 days
Fixed within SLAHighGoogle Chrome Linux pre-151.0.7922.72 Views use-after-free enables remote heap corruption via crafted HTMLAug 5, 2026Aug 20, 2026Aug 11, 20266 days
Fixed within SLAMediumAndroid Chrome <151.0.7922.72 GPU side-channel leaks cross-origin data via crafted HTMLAug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumChrome Cast prior to 151.0.7922.72 cross-origin data leak via crafted HTML pageAug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumGoogle Chrome pre-151.0.7922.72 CSS bug allows remote UXSS via crafted HTMLAug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumGetUserMedia cross-origin data leak in Chrome before 151.0.7922.72 via compromised renderer using crafted HTML pageAug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumGoogle Chrome Credential Management vulnerability enables remote UI spoofing via crafted HTML pre-151.0.7922.72Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumChrome Payments insufficient input validation allows UI spoofing via compromised renderer prior to 151.0.7922.72Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumChrome iOS pre-151.0.7922.72 input validation flaw enables remote navigation restriction bypassAug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumBlink vulnerability allowed cross-origin data leak via crafted HTML in Chrome <151.0.7922.72Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumInappropriate DevTools implementation enables same-origin policy bypass before Chrome 151.0.7922.72 via crafted HTMLAug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAHighInsufficient DevTools input validation enables privilege escalation via malicious Chrome extension (pre-151.0.7922.72)Aug 5, 2026Aug 20, 2026Aug 11, 20266 days
Fixed within SLAMediumUninitialized use in ANGLE allowed cross-origin data leak in Chrome <151.0.7922.72 via crafted HTML pageAug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAHighChrome Mac Audio use-after-free permits sandbox escape after renderer compromise via crafted HTML (pre-151.0.7922.72)Aug 5, 2026Aug 20, 2026Aug 11, 20266 days
Fixed within SLAMediumChrome pre-151.0.7922.72 Loader bug leaks cross-origin data via crafted HTML pageAug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumChrome iOS <151.0.7922.72: Omnibox URL spoofing via crafted HTML pageAug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumChrome Isolated Web Apps navigation restriction bypass via crafted HTML (pre-151.0.7922.72)Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumChrome prior to 151.0.7922.72: Remote Site Isolation bypass via crafted HTML pageAug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumChrome Autofill pre-151.0.7922.72 cross-origin data leak via crafted HTML pageAug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumChrome <151.0.7922.72 Receiver policy bypass allows sandbox escape via crafted HTMLAug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumChrome <151.0.7922.72 PresentationAPI vulnerability allows cross-origin data leak via crafted HTMLAug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAHighPre-151.0.7922.72 Chrome Variations input validation flaw enables heap corruption via privileged network attackerAug 5, 2026Aug 20, 2026Aug 11, 20266 days
Fixed within SLAMediumChrome Cast insufficient input validation allowed cross-origin data leak via crafted HTML (pre-151.0.7922.72)Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumChrome WebGL out-of-bounds read pre-151.0.7922.72 enables remote memory disclosure via crafted HTML pageAug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumUninitialized Skia use in Chrome <151.0.7922.72 leaks cross-origin data via crafted HTMLAug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumChrome macOS Media out-of-bounds read enables sandbox escape after renderer compromise (pre-151.0.7922.72)Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumChrome Cast insufficient input validation leaks cross-origin data via crafted HTML (pre-151.0.7922.72)Aug 5, 2026Sep 19, 2026Aug 11, 20266 days

Make CVE remediation our job, not yours.

Tell us what you run. We'll show you what Determinate Secure Packages covers, how the SLA applies, and how to get started.

Email sales@determinate.systems