Skip to content
October 19, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • Linux
  • MX Linux 17.1 released, Debian-based Linux distribution
  • Linux

MX Linux 17.1 released, Debian-based Linux distribution

Do Son March 7, 2018 3 minutes read
MX Linux
Add Daily CyberSecurity as a preferred source on Google

MX Linux is a cooperative venture between the antiX and former MEPIS communities, using the best tools and talents from each distro. It is a midweight OS designed to combine an elegant and efficient desktop with simple configuration, high stability, solid performance and medium-sized footprint.

MX Linux relies on the excellent upstream work by Linux and the open-source community, deploying Xfce4 as Desktop Environment on top of a Debian Stable base. We draw from the core antiX system and include work and ideas used by Warren Woodford for his MEPIS project. Ongoing backports and outside additions to our repos serve to keep components current with developments.

MX Linux began in a discussion about future options among members of the MEPIS community in December 2013. Developers from antiX then joined them, bringing the ISO build system as well as the Live-USB/DVD technology. The name “MX” was chosen to combine the first letter of Mepis with the last of antiX, thus symbolizing their collaboration. In order to be listed on DistroWatch, MX Linux was presented as a version of antiX. It received its own DistroWatch page as a separate distribution with the release of the first Public Beta of MX-16 on November 2, 2016. Details here; release history here.

MX Linux 17.1 has been released. This version brings new kernels, 4.15.0-1 to fix meltdown/ specter security issues.
The latest updates from Debian (stretch), antiX and MX repos.
  • Both 32-bit and 64-bit ISOs are 4.15.0-1 cores and:
    • The 64-bit ISO has been patched with the Meltdown/Spectre vulnerability.
    • The 32-bit ISO contains the PAE kernel,
    • The kernel can be simply switched via the MX Package Installer, eg to the latest liquorix kernel or downgraded to the Debian Stable kernel (4.9);
  • Latest packages from Debian 9.4 Stretch, antiX, and MX repositories, for example:
    • Firefox 58.0.2 (59 is about to enter the warehouse),
    • VLC 2.2.8-2 (3.0 in the Test warehouse),
    • Thunderbird 52.6,
    • LibreOffice 6.0.1,
    • LuckyBackup 0.4.9-1,
    • Passwords and Keys 3.20.0-3.1,
    • And Xfce4 Terminal 0.8.3-1;
  • Updated and new mx-apps:
    • MX-Updater now includes the “Automatic Updates” option.
    • MX-Live-USB-Maker is the front end of a new antiX live-usb-maker command line tool with more features, and it provides “copy mirrored to the hard disk (dd)” for non-antiX/MX family ISOs. “mode,
    • MX-Tweaks adds a “configuration option” tab that can be used to reset lightdm and thunar custom actions to the default.
    • MX Package Installer updates bring a faster experience
    • In addition, almost all MX applications have translation updates;
  • The MX Package Installer contains updates to the “Popular Apps” tab and features:
    • Popular apps from the Debian Stable repository,
    • Well-configured packages introduced from Debian Testing/Sid,
    • Decentralized packages that are not included in the Debian repository and are imported from a developer’s website or another distribution repository.
    • Faster performance, built-in console,
    • Browsers: Google-Chrome (64 bit), Opera, swim jet, etc.
      Children: Preschool, Primary, etc.
      Graphics: ImageMagick, Inkscape, etc.
      Messaging: Pidgin, Skype (64 bit), etc.
      Network: Dropbox, Tor, and Privoxy, etc.
      Office: GnuCash, Gnumeric, Abiword, okular, evince, Adobe Reader, Calibre, etc.
      System: Budgie Desktop, KDE, LXDE, MATE, etc. (not configured)
      Audio: Audacity, DeaDBeeF, Pithos, Spotify, etc.
      Video: DVDStyler, MPlayer, OpenShot, kdenlive, etc.
      Themes: New Themes and icons;
  • Localization enhancements for thunar and mx-manual bring more language support.

Download

Support Our Threat Intelligence

Find our tech and OS security coverage helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee Logo Buy Me a Coffee
Select your plan
Free Pro Team

Hover over a plan to see its benefits.

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.

We respect your inbox. Unsubscribe anytime.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: MX Linux

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 19, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 19, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 19, 2026
  • CVE-2026-111862CVSS 9.8
    Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123...
    Admin intel📅 Updated: Oct 17, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    Watchtower Verified📅 Updated: Oct 17, 2026
  • CVE-2025-61624CVSS 6.0
    An Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0...
    CISA KEV📅 Added to KEV: Oct 16, 2026
  • CVE-2026-102764CVSS 9.3
    The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the...
    CISA KEV📅 Added to KEV: Oct 16, 2026
  • CVE-2026-106931CVSS 8.5
    SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS...
    Admin intel📅 Updated: Oct 15, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-103091CVSS 9.3
    Missing Authorization (CWE-862) and Initialization of a Resource with an Insecure Default (CWE-1188) in the MCP proxy (HandleStreamPassThrough...
    📅 Updated: Oct 19, 2026
  • CVE-2026-102503CVSS 9.3
    Missing Authentication for Critical Function (CWE-306) and Missing Authorization (CWE-862) in the /libp2p-http ingress server (StartIngressServer in cmd/sam-node/node.go)...
    📅 Updated: Oct 19, 2026
  • CVE-2026-108983CVSS 9.8
    A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .
    📅 Updated: Oct 19, 2026
  • CVE-2025-39496CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW WooBeWoo Product Filter...
    📅 Updated: Oct 18, 2026
  • CVE-2025-48100CVSS 9.1
    Improper Control of Generation of Code ('Code Injection') vulnerability in extremeidea bidorbuy Store Integrator bidorbuystoreintegrator allows Remote Code...
    📅 Updated: Oct 18, 2026
  • CVE-2025-49387CVSS 10.0
    Unrestricted Upload of File with Dangerous Type vulnerability in add-ons.org Drag and Drop File Upload for Elementor Forms...
    📅 Updated: Oct 18, 2026
  • CVE-2025-49388CVSS 9.8
    Incorrect Privilege Assignment vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Privilege Escalation.This issue affects Miraculous Core Plugin:...
    📅 Updated: Oct 18, 2026
  • CVE-2025-52761CVSS 9.8
    Deserialization of Untrusted Data vulnerability in manfcarlo WP Funnel Manager wp-funnel-manager allows Object Injection.This issue affects WP Funnel...
    📅 Updated: Oct 18, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.