Release 2026_047 (2026-11-09)

Impact

25.05

  • Machines will reboot to activate a changed kernel.

25.11

  • Machines will reboot to activate a changed kernel.

26.05

  • Machines will reboot to activate a changed kernel.

NixOS 25.05 platform

  • Update Linux kernels to fix CVE-2026-98432 (PL-135798)

  • Pull upstream NixOS changes, security fixes, and package updates:

    • linuxKernelStable: 6.12.92 -> 6.12.115

    • linuxKernelVerify: 6.12.92 -> 6.12.115

NixOS 25.11 platform

  • webproxy: simplify upgrade to fc-nixos-26.05 while keeping Varnish as package (PL-135684)

    As fc-nixos-26.05 changes the underlying webproxy implementation to vinyl-cache by default, the config flyingcircus.roles.webproxy.package = pkgs.varnish80 needs to be set to keep using varnish. This option is now already available on fc-nixos-25.11 and can be set ahead of the upgrade.

  • Update Linux kernels to fix CVE-2026-98432 (PL-135798)

  • Pull upstream NixOS changes, security fixes, and package updates:

    • linuxKernelStable: 6.12.93 -> 6.12.114

    • linuxKernelVerify: 6.12.93 -> 6.12.114

NixOS 26.05 platform

  • Pull upstream NixOS changes, security fixes, and package updates:

    • asterisk: 22.8.2 -> 22.11.0

    • bind: 9.20.29 -> 9.20.30

    • cacert: 3.126 -> 3.131.1

    • chromedriver: 156.0.8078.47 -> 156.0.8078.79

    • chromium: 156.0.8078.47 -> 156.0.8078.79

    • curl: 8.22.0 -> 8.23.0

    • docker: 29.9.1 -> 29.9.2

    • element-web: 1.12.30 -> 1.12.33

    • ffmpeg: 8.1.2 -> 8.1.3

    • firefox: 158.0.1 -> 159.0

    • gitaly: 19.4.3 -> 19.5.3

    • gitlab: 19.4.3 -> 19.5.3

    • gitlab-container-registry: 4.42.0 -> 4.43.0

    • gitlab-ee: 19.4.3 -> 19.5.3

    • gitlab-pages: 19.4.3 -> 19.5.3

    • gitlab-workhorse: 19.4.3 -> 19.5.3

    • go: 1.26.8 -> 1.26.10

    • grafana: 13.0.11 -> 13.0.12

    • imagemagick: 7.1.2-32 -> 7.1.2-34

    • libx11: 1.8.13 -> 1.8.14

    • linuxKernelGPU: 6.18.57 -> 6.18.60

    • linuxKernelStable: 6.18.57 -> 6.18.60

    • linuxKernelVerify: 6.18.57 -> 6.18.60

    • mariadb: 11.4.12 -> 11.4.13

    • mastodon: 4.6.9 -> 4.6.10

    • mysql: 11.4.12 -> 11.4.13

    • nginxMainline: 1.31.7 -> 1.31.8

    • nodejs: 24.21.0 -> 24.22.1

    • nodejs_24: 24.21.0 -> 24.22.1

    • nss_latest: 3.131 -> 3.132

    • openssh: 10.5p1 -> 10.6p1

    • podman: 5.8.8 -> 5.8.9

    • python3: 3.13.15 -> 3.13.17

    • python311: 3.11.16 -> 3.11.17

    • python312: 3.12.14 -> 3.12.15

    • python3Packages.pillow: 12.3.0 -> 13.0.0

    • redis: 8.8.3 -> 8.8.4

    • strace: 7.2 -> 7.3

    • util-linux: 2.42.3 -> 2.42.4

    • vim: 9.2.0541 -> 9.2.1252

Detailed Changes