--- title: Changelog: Determinate Nix 3.17.3 | daily.dev description: Determinate Nix 3.17.3 has been released with a critical security fix for a root privilege escalation vulnerability (GHSA-g3g9-5vj6-r3gj) affecting all Linux... canonical: https://daily.dev/posts/changelog-determinate-nix-3-17-3-cadcju7sw twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Changelog: Determinate Nix 3.17.3 | daily.dev og:description: Determinate Nix 3.17.3 has been released with a critical security fix for a root privilege escalation vulnerability (GHSA-g3g9-5vj6-r3gj) affecting all Linux... og:url: https://daily.dev/posts/changelog-determinate-nix-3-17-3-cadcju7sw og:image: https://api.daily.dev/og/posts/cadCJU7sw.png og:image:alt: Changelog: Determinate Nix 3.17.3 og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Changelog: Determinate Nix 3.17.3 **[Determinate Systems](https://daily.dev/sources/determinate-systems)** · 4 min read · 0 upvotes · 0 comments ## Summary Determinate Nix 3.17.3 has been released with a critical security fix for a root privilege escalation vulnerability (GHSA-g3g9-5vj6-r3gj) affecting all Linux users running prior versions. All Linux users are advised to upgrade immediately. The release also includes several improvements: deduplication of concurrent source tree downloads via per-source-tree locking, fetching locked flake inputs from binary caches to reduce load on code forges, a fix for Git shallow fetching hangs caused by stale lock files, WAT format support in builtins.wasm, tab completion for nix profile upgrade and nix profile remove, more resilient nix.conf and netrc handling, improved update detection, legacy flake schema support, and better C++ exception debugging. NixOS AMIs with Determinate Nix are now available in all AWS GovCloud and AWS European Sovereign Cloud regions. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Changelog: Determinate Nix 3.21.7](https://daily.dev/posts/changelog-determinate-nix-3-21-7-spb0ixqhl) · Determinate Systems · 0 upvotes · 0 comments - [Changelog: a new upstream base, GC roots for nix eval, and a faster nix copy](https://daily.dev/posts/changelog-a-new-upstream-base-gc-roots-for-nix-eval-and-a-faster-nix-copy-a9ytihpvx) · Determinate Systems · 0 upvotes · 0 comments - [Changelog: FlakeHub Cache edge routing and a few crash fixes](https://daily.dev/posts/changelog-flakehub-cache-edge-routing-and-a-few-crash-fixes-umodwxeoj) · Determinate Systems · 0 upvotes · 0 comments - [Changelog: faster evaluation and FedRAMP cache keys](https://daily.dev/posts/changelog-faster-evaluation-and-fedramp-cache-keys-qbkpwjrox) · Determinate Systems · 0 upvotes · 0 comments - [Introducing Determinate Secure Packages LTS](https://daily.dev/posts/introducing-determinate-secure-packages-lts-p3regopis) · Determinate Systems · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#nixos](https://daily.dev/tags/nixos) [View this post on daily.dev](https://daily.dev/posts/changelog-determinate-nix-3-17-3-cadcju7sw) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Changelog: Determinate Nix 3.17.3","url":"https://daily.dev/posts/changelog-determinate-nix-3-17-3-cadcju7sw","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/changelog-determinate-nix-3-17-3-cadcju7sw"},"datePublished":"2026-07-26T07:48:41.482Z","dateModified":"2026-07-26T07:51:49.322Z","description":"Determinate Nix 3.17.3 has been released with a critical security fix for a root privilege escalation vulnerability (GHSA-g3g9-5vj6-r3gj) affecting all Linux...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/3c1225b91b553781eff09d7d50a2fd3e?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/3c1225b91b553781eff09d7d50a2fd3e?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Determinate Systems","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Determinate Systems","logo":"https://media.daily.dev/image/upload/s--E2qrkc9w--/c_limit,w_256/f_auto,q_auto/v1785052094/logos/determinate-systems?_a=BAMAMicg0","url":"https://daily.dev/sources/determinate-systems"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/changelog-determinate-nix-3-17-3-cadcju7sw","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,nixos","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Determinate Systems","item":"https://daily.dev/sources/determinate-systems"},{"@type":"ListItem","position":3,"name":"Changelog: Determinate Nix 3.17.3"}]} ```