Linux

Turnkey GNU/Linux v15.0 released

Do Son July 29, 2018 1 minute read

Turnkey GNU/Linux

Turnkey GNU/Linux is a free Debian based library of system images that pre-integrates and polishes the best free software components into secure, easy to use solutions.

TurnKey is inspired by a belief in the democratizing power of free software, like science, to promote the progress of a free & humane society. Without the freedom to freely distribute, tinker and learn from free software the Internet as we know it would not exist. Free software is the silent, often invisible power behind the greatest technological marvel of our era.

At the time of writing Debian, the largest GNU/Linux distribution has over 37,500 packages in its software repositories. The free software movement has collectively created a treasure trove of software that anyone is free to use, distribute, modify and learn from.

Jeremy Davis has announced TurnKey Linux 15.0, a new version of the upcoming virtual appliance designed for highly specialized servers.

The new version was upgraded from Debian 8/Jessie to 9/Stretch, along with the following changes:

Based on Debian 9/Stretch
PHP 7.0
MySQL replaced with MariaDB
New Webmin Theme
Reproducible Packages
More…

Support Our Threat Intelligence

Find our tech and OS security coverage helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee

Written by

@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: Turnkey GNU/Linux

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-88772
Memory overflow vulnerability leading to remote code execution or denial of service.
Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
CVE-2026-88771
Remote code execution due to improper input validation that can allow an unauthenticated attacker to execute arbitrary commands.
Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
CVE-2026-65660CVSS 8.8
Improper control of generation of code (\'code injection\') in Microsoft Office SharePoint allows an authorized attacker to execute...
Admin intelCISA KEV📅 Added to KEV: Sep 25, 2026📅 Updated: Sep 25, 2026
CVE-2026-5430CVSS 10.0
The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows...
CISA KEV📅 Added to KEV: Sep 24, 2026
CVE-2026-71362CVSS 9.1
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could...
CISA KEV📅 Added to KEV: Sep 24, 2026
CVE-2026-48842CVSS 8.1
Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via...
Admin intel📅 Updated: Sep 23, 2026
CVE-2026-87902
Unauthenticated path traversal in page-template resolution leading to conditional RCE An unauthenticated attacker can make get_page_template() page-template resolution...
Admin intelCISA KEV📅 Added to KEV: Sep 25, 2026📅 Updated: Sep 23, 2026
CVE-2026-94127CVSS 9.8
When a BIG-IP APM access policy and an OAuth profile is configured on a virtual server, specific malicious...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026

CVE-2025-49796CVSS 9.1
A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a...
📅 Updated: Sep 28, 2026
CVE-2025-49794CVSS 9.1
A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when...
📅 Updated: Sep 28, 2026
CVE-2026-100896CVSS 9.4
A weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. The affected element is the function system of the...
📅 Updated: Sep 28, 2026
CVE-2026-100886CVSS 10.0
A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The affected element is an unknown...
📅 Updated: Sep 27, 2026
CVE-2026-88771CVSS 9.5
Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37,...
CISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
CVE-2026-88772CVSS 9.5
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before...
CISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
CVE-2026-101090CVSS 9.3
Nezha 2.2.3 contains a Host header injection regression in the OAuth2 redirect endpoint. When the new optional dashboard_host...
📅 Updated: Sep 27, 2026
CVE-2026-101065CVSS 9.3
Obot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970, the Docker...
📅 Updated: Sep 27, 2026