Skip to content
October 21, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • Linux
  • UBOS Linux Beta 14 release, Linux distro for personal servers and Indie IoT devices
  • Linux

UBOS Linux Beta 14 release, Linux distro for personal servers and Indie IoT devices

Do Son May 1, 2018 5 minutes read
UBOS Linux
Add Daily CyberSecurity as a preferred source on Google

UBOS Linux is an Arch Linux based server distribution. UBOS, a new Linux distro, in order to make it simple to set up and maintain a Linux server that runs common web applications and keeps data under control of the owner of the server. It’s our vision that everybody should have a server in their home one day that stays independent of the big commercial and governmental overlords.

UBOS Linux Feature

  • With UBOS Linux,Β web applications can be installed, and fully configured with a single command. This takes out the drudgery of software installation and configuration on servers and allows much more people to run their own websites.Wanting to run a, say, Python app should not require users having to know anything about Python; same about other languages, frameworks, databases and the like. You don’t care about which language was used to create apps on your smartphone either.

    On UBOS Linux, unlike other Linux distros, a typical user never has to edit a Linux-level configuration file (say inΒ /etc/), provision a database, start or stop services, and the like.

  • UBOSΒ fully automates app management at virtual hosts. You can run, say, five different instances of WordPress with different plugins and themes at five different hostnames on the same computer, or even at the same hostname (e.g. example.com/blog1, example.com/blog2 etc.). You can deploy all of them individually or at the same time with a single command.UBOS can now also automatically obtain SSL/TLS certificates fromΒ Letsencrypt.org.
  • UBOSΒ pre-installs and pre-configures networking and other infrastructure, so it is ready to be used as soon as it has booted. For example, not only does UBOS boot as a DHCP client, but also runs a web server with a default web application behind a preconfigured firewall. This allows the user to use UBOS immediately, with little to no systems configuration.On other distros, this is an open-ended manual process requiring substantial systems administration knowledge and even more patience.
  • Systems that have two Ethernet interfaces can be turned into aΒ home router/gatewayΒ with a single command. In this “gateway” configuration, UBOS automatically sets up network masquerading, a firewall, a local DNS and DHCP server.Apps installed on the system can either be only accessible on the local-area network or also on the public internet.
  • UBOS canΒ backup or restoreΒ all, or any subset of installed applications on a device, including their entire configuration (like TLS) in a single command. Optionally, backups may be encrypted and/or automatically uploaded to Amazon S3.
  • UBOSΒ “full-stack testing”Β ensures that core UBOS operating system, networking, middleware, and apps, are all tested with each other before a new UBOS release is pushed out. This reduces the likelihood that, for example, an upgrade to the database or web server will break a web application.Some Linux distros perform similar testing with desktop applications, but we are not aware of any other distros that do it for server-side, web applications.
  • Unlike most other distros, UBOS does not try to provide every conceivable package. Instead, we try to provideΒ a few packages as possibleΒ by eliminating alternate packages that provide overlapping functionality. For example, we picked Apache over nginx (due to broader software support). To support the goals of UBOS, this has great advantages: it makes testing much simpler because UBOS has far less code, and far fewer configurations need to be tested. This, in turn, makes application developers’ lives easier and installations less brittle.Users who wish to use other packages not provided through UBOS can still obtain those from the Arch Linux repositories. UBOS is a (compatible) derivative of Arch Linux.
  • UBOS uses aΒ rolling-release development modelΒ (seeΒ Wikipedia page). UBOS never requires major upgrades; instead, updates are made available incrementally. This ensures that devices can continue to be updated and keep running for the long-term.
  • UBOS itself is allΒ free/libre and open software, so there’s no proprietary lock-in and you can keep us honest by reviewing our code.There is one exception: some hardware platforms, notably some versions of the ARM, require “blobs” to function. (The Free Software Foundation provides aΒ great description.) UBOS bundles those blobs in order to be able to support those platforms. Of course, if you don’t like proprietary blobs, only use UBOS on platforms where they aren’t required. In, of course, you can install and run whatever software you like, in addition to what is available through the official UBOS repositories.

UBOS Linux Beta 14 release. This version has been focused on:

  • It’s now easy to use a separate β€œbig data disk” (like an external USB disk on a Raspberry Pi, or an extra big volume on Amazon EC2). This makes it much simpler for UBOS users that have a lot of data on their device.
  • Perform backup and system upgrade in a single step for even less work and worry when upgrading everything from OS to apps.
  • Create sites from templates files, and only fill in the information that wasn’t provided already in the template.
  • There’s a new command for concisely displaying the networking configuration.
  • Developers can now write installation scriptlets in any language; there is no more need to write Perl wrappers.
  • … plus the usual hundreds of package upgrades, feature improvements and bug fixes.
  • More…

 

Download

Support Our Threat Intelligence

Find our tech and OS security coverage helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee Logo Buy Me a Coffee
Select your plan
Free Pro Team

Hover over a plan to see its benefits.

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.

We respect your inbox. Unsubscribe anytime.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon
Written by
@DdoS Β· Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: UBOS Linux

Search

Translation

CVE ALERTS
πŸ“ˆ

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

πŸ›‘οΈ

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

πŸ™

GitHub Issues
Auto-create alert tickets without duplication.

πŸ“¬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

πŸ”€

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days β†’

🚨 Active Exploits in the Wild

  • CVE-2012-20002CVSS 8.7
    TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows unauthenticated attackers to...
    Watchtower Verified📅 Updated: Oct 21, 2026
  • CVE-2012-20003CVSS 5.1
    Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to...
    Watchtower Verified📅 Updated: Oct 21, 2026
  • CVE-2012-20004CVSS 5.1
    K-news plugin for WordPress before 1.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject...
    Watchtower Verified📅 Updated: Oct 21, 2026
  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 21, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 21, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 21, 2026
  • CVE-2026-66373CVSS 7.5
    Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution...
    Admin intel📅 Updated: Oct 20, 2026
  • CVE-2026-96652CVSS 5.3
    Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Plex-Token value can include a...
    CISA KEV📅 Added to KEV: Oct 20, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-114119CVSS 9.3
    Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is shared...
    📅 Updated: Oct 21, 2026
  • CVE-2026-114108CVSS 9.3
    HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that allows unauthenticated attackers to access the...
    📅 Updated: Oct 21, 2026
  • CVE-2026-114087CVSS 9.2
    Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets from hosting/docker/.env.example allow authentication bypass because the...
    📅 Updated: Oct 21, 2026
  • CVE-2026-114053CVSS 9.2
    vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mm_processor_kwargs.code_revision to Transformers AutoProcessor.from_pretrained, letting clients select which revision of...
    📅 Updated: Oct 21, 2026
  • CVE-2026-113736CVSS 9.3
    A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function login_prepare_hnap of the...
    📅 Updated: Oct 21, 2026
  • CVE-2026-92559CVSS 9.8
    IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to...
    📅 Updated: Oct 20, 2026
  • CVE-2026-91658CVSS 9.9
    Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows...
    📅 Updated: Oct 20, 2026
  • CVE-2026-91663CVSS 9.9
    Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows...
    📅 Updated: Oct 20, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
Β© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.