Re: CVE-2019-17365: Nix per-user profile directory hijack

[Michael Orlitzky <michael () orlitzky com>]

> Hello Michael and oss-security,
>
> As soon as we are comfortable with a fix, we will release a new
> version of Nix.
>
> We will also examine how we handle security issues, and publish a
> post-mortem of how this happened and how our processes will be changed
> to prevent this from happening again.

I don't think you handled it unusually badly (shit happens), but the
desire to improve is admirable nonetheless.