Newsletter
v17.0 stable on it's way
Not displaying properly? Please read online: /newsletter/v17.0-on-the-way Hi there, A couple of quick updates and a tease about the upcoming v17.0 release. Including an important …
Topic
Security and News Announcements
12 matching pages
Newsletter
Automated 'grub-pc' security update failing on some platforms
A recent Debian security update for the 'grub-pc' package may be failing on some platforms. If you are running TurnKey Linux v16.x on AWS EC2 (i.e. from AMI) or a local VM - …
Newsletter
Debian security update breaks v15.x LAMP based servers
An automatically installed Debian MariaDB (drop-in replacement for MySQL) security update, has broken all v15.x appliances that rely on MariaDB database engine. That means that …
Newsletter
Drupal - Highly Critical Security Issue (SA-CORE-2018-002)
DRUPAL SECURITY ALERT Drupal 7 & 8 (as well as 6) are vulnerable to a highly critical security issue known as SA-CORE-2018-002. A brief overview with links to additional …
Newsletter
All TurnKey Servers potentially vulnerable to Dirty COW (CVE-2016-5195) and other news
SECURITY ALERT All current version of TurnKey Linux are potentially vulnerable to CVE-2016-5195, a kernel privilege escalation bug tagged "Dirty COW". TurnKey versions 13.x and …
Newsletter
GitLab & Magento security, new MediaServer app, other updates
TurnKey GitLab was vulnerable to CVE-2016-4340. Privilege escalation via "impersonate" feature. We fixed the app but existing deployments require manual update: …
Newsletter
v14.0 Optimised Builds, New App: Odoo & TurnKey needs a Drupal Expert
Since our v14.0 stable release (of ISOs) back in mid September[1]; we've been madly working to finalise v14.0. I am pleased to announce that all of the TurnKey build types you've …
Newsletter
CVE-2015-8103: TurnKey Jenkins critical security hole
Existing deployments of TurnKey Jenkins are still vulnerable to CVE-2015-8103, a critical issue that allows remote code execution by unauthenticated users. Due to the seriousness …
Newsletter
v14.0 stable release - Massive Community Effort
The wait is over: TurnKey v14.0 is now available. massive community involvement; biggest ever Debian Jessie (8.2) based appliances refreshed with the latest upstream software …
Newsletter
TurnKey v14.0 RC1 based on Debian 8 ready for testing & development
Ahoy free software mateys! Debian 8 AKA Jessie came out last month and we've been super busy working on version 14 of the TurnKey GNU/Linux library of apps which will be based on …
Newsletter
CVE-2014-0235 GHOST: reboot or restart services
A remotely exploitable, 14 year old bug in glibc has reared its ugly head: CVE-2014-0235 Security updates have been pushed out automatically, courtesy of Debian to TurnKey 13 …
Newsletter
SSH security issue, new apps, BitKey for Bitcoin, an epiphany on values and other stories
Round of announcements: Security update regenerates stale SSH ECDSA host key Thanks to Peter Lieven from KAMP.de for discovering a stale ECDSA host key which was leftover from the …