Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
  • Home
  • Linux
  • UBOS Linux Beta 14 release, Linux distro for personal servers and Indie IoT devices
  • Linux

UBOS Linux Beta 14 release, Linux distro for personal servers and Indie IoT devices

Do Son May 1, 2018 5 minutes read
UBOS Linux

UBOS Linux is an Arch Linux based server distribution. UBOS, a new Linux distro, in order to make it simple to set up and maintain a Linux server that runs common web applications and keeps data under control of the owner of the server. It’s our vision that everybody should have a server in their home one day that stays independent of the big commercial and governmental overlords.

UBOS Linux Feature

  • With UBOS Linux, web applications can be installed, and fully configured with a single command. This takes out the drudgery of software installation and configuration on servers and allows much more people to run their own websites.Wanting to run a, say, Python app should not require users having to know anything about Python; same about other languages, frameworks, databases and the like. You don’t care about which language was used to create apps on your smartphone either.

    On UBOS Linux, unlike other Linux distros, a typical user never has to edit a Linux-level configuration file (say in /etc/), provision a database, start or stop services, and the like.

  • UBOS fully automates app management at virtual hosts. You can run, say, five different instances of WordPress with different plugins and themes at five different hostnames on the same computer, or even at the same hostname (e.g. example.com/blog1, example.com/blog2 etc.). You can deploy all of them individually or at the same time with a single command.UBOS can now also automatically obtain SSL/TLS certificates from Letsencrypt.org.
  • UBOS pre-installs and pre-configures networking and other infrastructure, so it is ready to be used as soon as it has booted. For example, not only does UBOS boot as a DHCP client, but also runs a web server with a default web application behind a preconfigured firewall. This allows the user to use UBOS immediately, with little to no systems configuration.On other distros, this is an open-ended manual process requiring substantial systems administration knowledge and even more patience.
  • Systems that have two Ethernet interfaces can be turned into a home router/gateway with a single command. In this “gateway” configuration, UBOS automatically sets up network masquerading, a firewall, a local DNS and DHCP server.Apps installed on the system can either be only accessible on the local-area network or also on the public internet.
  • UBOS can backup or restore all, or any subset of installed applications on a device, including their entire configuration (like TLS) in a single command. Optionally, backups may be encrypted and/or automatically uploaded to Amazon S3.
  • UBOS “full-stack testing” ensures that core UBOS operating system, networking, middleware, and apps, are all tested with each other before a new UBOS release is pushed out. This reduces the likelihood that, for example, an upgrade to the database or web server will break a web application.Some Linux distros perform similar testing with desktop applications, but we are not aware of any other distros that do it for server-side, web applications.
  • Unlike most other distros, UBOS does not try to provide every conceivable package. Instead, we try to provide a few packages as possible by eliminating alternate packages that provide overlapping functionality. For example, we picked Apache over nginx (due to broader software support). To support the goals of UBOS, this has great advantages: it makes testing much simpler because UBOS has far less code, and far fewer configurations need to be tested. This, in turn, makes application developers’ lives easier and installations less brittle.Users who wish to use other packages not provided through UBOS can still obtain those from the Arch Linux repositories. UBOS is a (compatible) derivative of Arch Linux.
  • UBOS uses a rolling-release development model (see Wikipedia page). UBOS never requires major upgrades; instead, updates are made available incrementally. This ensures that devices can continue to be updated and keep running for the long-term.
  • UBOS itself is all free/libre and open software, so there’s no proprietary lock-in and you can keep us honest by reviewing our code.There is one exception: some hardware platforms, notably some versions of the ARM, require “blobs” to function. (The Free Software Foundation provides a great description.) UBOS bundles those blobs in order to be able to support those platforms. Of course, if you don’t like proprietary blobs, only use UBOS on platforms where they aren’t required. In, of course, you can install and run whatever software you like, in addition to what is available through the official UBOS repositories.

UBOS Linux Beta 14 release. This version has been focused on:

  • It’s now easy to use a separate “big data disk” (like an external USB disk on a Raspberry Pi, or an extra big volume on Amazon EC2). This makes it much simpler for UBOS users that have a lot of data on their device.
  • Perform backup and system upgrade in a single step for even less work and worry when upgrading everything from OS to apps.
  • Create sites from templates files, and only fill in the information that wasn’t provided already in the template.
  • There’s a new command for concisely displaying the networking configuration.
  • Developers can now write installation scriptlets in any language; there is no more need to write Perl wrappers.
  • … plus the usual hundreds of package upgrades, feature improvements and bug fixes.
  • More…

 

Download

Add Daily CyberSecurity as a preferred source on Google

Support Our Threat Intelligence

Find our tech and OS security coverage helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee Logo Buy Me a Coffee
Select your plan
Free Pro Team

Hover over a plan to see its benefits.

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.

We respect your inbox. Unsubscribe anytime.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: UBOS Linux

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-125758CVSS 9.1
    Aptabase before commit 61d4c01 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge sign-in links by...
    📅 Updated: Nov 10, 2026
  • CVE-2026-125757CVSS 9.4
    mailcow: dockerized before 2026-11 contains a server-side template injection vulnerability that allows domain administrators to execute commands in...
    📅 Updated: Nov 10, 2026
  • CVE-2026-103848CVSS 9.9
    Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS...
    📅 Updated: Nov 10, 2026
  • CVE-2026-92909CVSS 9.8
    Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the...
    📅 Updated: Nov 10, 2026
  • CVE-2026-91013CVSS 9.3
    Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker...
    📅 Updated: Nov 10, 2026
  • CVE-2026-91354CVSS 9.9
    Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK)....
    📅 Updated: Nov 10, 2026
  • CVE-2026-91323CVSS 9.8
    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected...
    📅 Updated: Nov 10, 2026
  • CVE-2024-5535CVSS 9.1
    Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.