Skip to content
July 28, 2026
  • Linkedin
  • Twitter
  • Facebook
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
  • Cyber Criminals
  • Data Leak
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • Linux
  • UBOS Linux Beta 14 release, Linux distro for personal servers and Indie IoT devices
  • Linux

UBOS Linux Beta 14 release, Linux distro for personal servers and Indie IoT devices

Do Son May 1, 2018 5 minutes read
UBOS Linux
Add Daily CyberSecurity as a preferred source on Google

UBOS Linux is an Arch Linux based server distribution. UBOS, a new Linux distro, in order to make it simple to set up and maintain a Linux server that runs common web applications and keeps data under control of the owner of the server. It’s our vision that everybody should have a server in their home one day that stays independent of the big commercial and governmental overlords.

UBOS Linux Feature

  • With UBOS Linux, web applications can be installed, and fully configured with a single command. This takes out the drudgery of software installation and configuration on servers and allows much more people to run their own websites.Wanting to run a, say, Python app should not require users having to know anything about Python; same about other languages, frameworks, databases and the like. You don’t care about which language was used to create apps on your smartphone either.

    On UBOS Linux, unlike other Linux distros, a typical user never has to edit a Linux-level configuration file (say in /etc/), provision a database, start or stop services, and the like.

  • UBOS fully automates app management at virtual hosts. You can run, say, five different instances of WordPress with different plugins and themes at five different hostnames on the same computer, or even at the same hostname (e.g. example.com/blog1, example.com/blog2 etc.). You can deploy all of them individually or at the same time with a single command.UBOS can now also automatically obtain SSL/TLS certificates from Letsencrypt.org.
  • UBOS pre-installs and pre-configures networking and other infrastructure, so it is ready to be used as soon as it has booted. For example, not only does UBOS boot as a DHCP client, but also runs a web server with a default web application behind a preconfigured firewall. This allows the user to use UBOS immediately, with little to no systems configuration.On other distros, this is an open-ended manual process requiring substantial systems administration knowledge and even more patience.
  • Systems that have two Ethernet interfaces can be turned into a home router/gateway with a single command. In this “gateway” configuration, UBOS automatically sets up network masquerading, a firewall, a local DNS and DHCP server.Apps installed on the system can either be only accessible on the local-area network or also on the public internet.
  • UBOS can backup or restore all, or any subset of installed applications on a device, including their entire configuration (like TLS) in a single command. Optionally, backups may be encrypted and/or automatically uploaded to Amazon S3.
  • UBOS “full-stack testing” ensures that core UBOS operating system, networking, middleware, and apps, are all tested with each other before a new UBOS release is pushed out. This reduces the likelihood that, for example, an upgrade to the database or web server will break a web application.Some Linux distros perform similar testing with desktop applications, but we are not aware of any other distros that do it for server-side, web applications.
  • Unlike most other distros, UBOS does not try to provide every conceivable package. Instead, we try to provide a few packages as possible by eliminating alternate packages that provide overlapping functionality. For example, we picked Apache over nginx (due to broader software support). To support the goals of UBOS, this has great advantages: it makes testing much simpler because UBOS has far less code, and far fewer configurations need to be tested. This, in turn, makes application developers’ lives easier and installations less brittle.Users who wish to use other packages not provided through UBOS can still obtain those from the Arch Linux repositories. UBOS is a (compatible) derivative of Arch Linux.
  • UBOS uses a rolling-release development model (see Wikipedia page). UBOS never requires major upgrades; instead, updates are made available incrementally. This ensures that devices can continue to be updated and keep running for the long-term.
  • UBOS itself is all free/libre and open software, so there’s no proprietary lock-in and you can keep us honest by reviewing our code.There is one exception: some hardware platforms, notably some versions of the ARM, require “blobs” to function. (The Free Software Foundation provides a great description.) UBOS bundles those blobs in order to be able to support those platforms. Of course, if you don’t like proprietary blobs, only use UBOS on platforms where they aren’t required. In, of course, you can install and run whatever software you like, in addition to what is available through the official UBOS repositories.

UBOS Linux Beta 14 release. This version has been focused on:

  • It’s now easy to use a separate “big data disk” (like an external USB disk on a Raspberry Pi, or an extra big volume on Amazon EC2). This makes it much simpler for UBOS users that have a lot of data on their device.
  • Perform backup and system upgrade in a single step for even less work and worry when upgrading everything from OS to apps.
  • Create sites from templates files, and only fill in the information that wasn’t provided already in the template.
  • There’s a new command for concisely displaying the networking configuration.
  • Developers can now write installation scriptlets in any language; there is no more need to write Perl wrappers.
  • … plus the usual hundreds of package upgrades, feature improvements and bug fixes.
  • More…

 

Download

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.


We respect your inbox. Unsubscribe anytime.

Support Our Threat Intelligence

If you find our CVE report and cybersecurity news helpful, consider supporting our work.

Buy Me a Coffee Logo Buy Me a Coffee PayPal
Crypto QR Code
USDT (TRC20):
TN8BdV8cp4T1Cd28gK9qTAnZknzzuwyUtm
USDT (ERC20):
0x3725e1a7d3bc5765499fa6aaafe307fabcd75bce

Share this article:

Facebook Post LinkedIn Telegram
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: UBOS Linux

Search

Translation

CVE WATCHTOWER
🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

Upgrade Package

🚨 Active Exploits in the Wild

  • CVE-2026-16812CVSS 10.0
    VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access...
    Admin intelCISA KEV📅 Added to KEV: Jul 27, 2026📅 Updated: Jul 27, 2026
  • CVE-2025-68686CVSS 5.9
    An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1,...
    CISA KEV📅 Added to KEV: Jul 27, 2026
  • CVE-2026-16723CVSS 9.0
    A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson\'s stock...
    Admin intel📅 Updated: Jul 25, 2026
  • CVE-2026-16232CVSS 9.1
    An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain...
    CISA KEV📅 Added to KEV: Jul 22, 2026
  • CVE-2026-50522CVSS 9.8
    Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
    Admin intelCISA KEV📅 Added to KEV: Jul 22, 2026📅 Updated: Jul 21, 2026
  • CVE-2026-63030CVSS 9.8
    WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion...
    Admin intelCISA KEV📅 Added to KEV: Jul 21, 2026📅 Updated: Jul 21, 2026
  • CVE-2026-60137CVSS 5.9
    WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter...
    Admin intelCISA KEV📅 Added to KEV: Jul 21, 2026📅 Updated: Jul 21, 2026
  • CVE-2026-0770CVSS 9.8
    Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers...
    CISA KEV📅 Added to KEV: Jul 21, 2026
Powered by CVE Watchtower

🔴 Live Critical Threats

  • CVE-2026-11841CVSS 9.4
    An attacker may perform unauthenticated read and write operations on sensitive filesystem...
  • CVE-2026-16462CVSS 9.8
    In PROCON-WEB SCADA the endpoint 'GetGridData' is not properly sanitized. This allows...
  • CVE-2026-11756CVSS 10.0
    A Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE...
  • CVE-2026-15014CVSS 9.8
    The SMS Alert – SMS & OTP for WooCommerce, Order Notifications &...
  • CVE-2026-55579CVSS 9.8
    Pheditor is a single-file editor and file manager written in PHP. From...
  • CVE-2026-48030CVSS 9.9
    Pheditor is a single-file editor and file manager written in PHP. From...
  • CVE-2026-63077CVSS 9.8
    In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible...
  • CVE-2026-17191CVSS 9.1
    An input validation vulnerability exists in an API component of the orchestrator....
  • CVE-2026-51303CVSS 9.8
    A use-after-free (UAF) vulnerability was discovered in the core parsing component of...
  • CVE-2025-50455CVSS 9.1
    SQL injection vulnerability exists in the order_by parameter of the /customers/search endpoint...
Powered by CVE WATCHTOWER

Our Websites
  • Penetration Testing Tools
  • The Daily Information Technology
  • Top Exploited CVEs
  • Daily CyberSecurity

    • About SecurityOnline.info
    • Advertise with us
    • Announcement
    • Contact
    • Contributor Register
    • Login
    • Disclaimer
    • DCMA
    • Privacy Policy
    • About SecurityOnline.info
    • Advertise on SecurityOnline.info
    • Contact Us

    When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

    • CVE Watchtower
    • CVE Statistics by Vendor 2026
    • Q2 2026 Report
    • Top Exploited CVEs
    • Linkedin
    • Twitter
    • Facebook
    • Youtube
    © 2017 - 2026 Daily CyberSecurity. All Rights Reserved.