https://www.turnkeylinux.org/newsletter/Recent content from TurnKey GNU/Linuxen-UShttps://www.turnkeylinux.org/newsletter/v17.0-on-the-way/https://www.turnkeylinux.org/newsletter/v17.0-on-the-way/Mon, 31 Jan 2022 05:53:42 +0000 Not displaying properly? Please read online: /newsletter/v17.0-on-the-way Hi there, A couple of quick updates and a tease about the upcoming v17.0 release. Including an important announcement for early adopters of (the upcoming, as yet not officially released) v17.0/Debian Bullseye/11 based systems. Core & TKLDev v17.0 Release Candidates - ready for battletesting We published v17.0 release candidates of Core and TKLDev in December 2021. If you get a chance, please do not hesitate to download …https://www.turnkeylinux.org/node/29326/https://www.turnkeylinux.org/node/29326/Tue, 16 Mar 2021 06:55:49 +0000 A recent Debian security update for the 'grub-pc' package may be failing on some platforms. If you are running TurnKey Linux v16.x on AWS EC2 (i.e. from AMI) or a local VM - installed from OVA or VMDK, then this likely affects you. If you installed from ISO, or are using LXC (e.g. via Proxmox) then you are NOT affected. For further info on diagnosing the issue and how to resolve it, please visit the Automated 'grub-pc' security update failing on some platforms blog post. If you have further …https://www.turnkeylinux.org/node/20609/https://www.turnkeylinux.org/node/20609/Tue, 20 Nov 2018 08:26:34 +0000 An automatically installed Debian MariaDB (drop-in replacement for MySQL) security update, has broken all v15.x appliances that rely on MariaDB database engine. That means that all LAMP based appliances, such as WordPress, Drupal, Joomla and about 70% of the library will not have a functioning MySQL-compatible DB engine running. The good news is that it's really easy to fix. Simply reinstall the 'default-mysql-server' package like this: apt update apt install default-mysql-server For more info, …https://www.turnkeylinux.org/node/19974/https://www.turnkeylinux.org/node/19974/Wed, 04 Apr 2018 05:16:30 +0000 DRUPAL SECURITY ALERT Drupal 7 & 8 (as well as 6) are vulnerable to a highly critical security issue known as SA-CORE-2018-002. A brief overview with links to additional information can be found on our blog: /blog/drupal-sa-core-2018-002-remote-code-execution The blog post also provides information on updating and/or patching v14.x appliances. Please post any questions or feedback in the comments on the blog post. Alternatively, please start a new thread on the forums: /forum Also a …https://www.turnkeylinux.org/node/19378/https://www.turnkeylinux.org/node/19378/Fri, 21 Oct 2016 07:05:23 +0000 SECURITY ALERT All current version of TurnKey Linux are potentially vulnerable to CVE-2016-5195, a kernel privilege escalation bug tagged "Dirty COW". TurnKey versions 13.x and 14.x should have already auto installed the updated kernel, however users need to manually reboot their servers for the patched kernel to be applied. Users of earlier versions of TurnKey (i.e. v11.x & v12.x) are strongly urged to upgrade their systems to a supported version of TurnKey ASAP. …https://www.turnkeylinux.org/node/18405/https://www.turnkeylinux.org/node/18405/Fri, 27 May 2016 14:07:04 +0000 TurnKey GitLab was vulnerable to CVE-2016-4340. Privilege escalation via "impersonate" feature. We fixed the app but existing deployments require manual update: /blog/gitlab-privilege-escalation TurnKey Magento IS NOT vulnerable to CVE-2016-4010 remote PHP code execution /blog/magento-remote-code-execution v14.1 Maintenance release: /blog/14.1-bugfixes-maintenance-and-more New MediaServer app by Jonathan Struebel: /mediaserver In non-TurnKey related news: Binary options scam - hundreds of …https://www.turnkeylinux.org/node/18017/https://www.turnkeylinux.org/node/18017/Wed, 02 Dec 2015 23:54:59 +0000 Since our v14.0 stable release (of ISOs) back in mid September[1]; we've been madly working to finalise v14.0. I am pleased to announce that all of the TurnKey build types you've come to expect are now available: hybrid ISO[1] OVA & VMDK[2] Docker[3] Proxmox & OpenNode (inc LXC/OVZ)[3] Xen[4] OpenStack[4] I am happy (and somewhat relieved) to say that we're nearly done with 14.0. Nearly you say? Yes; a significant remaining job is to finalise the LXC host appliance. Then it'll be time …https://www.turnkeylinux.org/node/18003/https://www.turnkeylinux.org/node/18003/Thu, 26 Nov 2015 20:14:59 +0000 Existing deployments of TurnKey Jenkins are still vulnerable to CVE-2015-8103, a critical issue that allows remote code execution by unauthenticated users. Due to the seriousness of the issue new builds of TurnKey Jenkins have been published today so new deployments are not vulnerable. Unfortunately pre-existing deployments still need to be updated manually: /blog/jenkins-remote-code-execution Cheers, Liraz Siri TunKey GNU/Linux GnuPG KeyID: 0xB06780D9 Fingerprint: 1B4D 4827 A06E 440F 74B8 8334 …https://www.turnkeylinux.org/node/17836/https://www.turnkeylinux.org/node/17836/Wed, 23 Sep 2015 12:51:43 +0000 The wait is over: TurnKey v14.0 is now available. massive community involvement; biggest ever Debian Jessie (8.2) based appliances refreshed with the latest upstream software versions New features include: new lightweight DB management tool (Adminer) hardened default SSL/TLS config security & system email alerts New appliances include: Ansible EspoCRM Foodsoft Laravel SuiteCRM Drupal8 (beta) Joomla 3.x Download ISOs or launch via the Hub (other build types coming soon) Read more here: …https://www.turnkeylinux.org/node/17552/https://www.turnkeylinux.org/node/17552/Thu, 28 May 2015 09:38:02 +0000 Ahoy free software mateys! Debian 8 AKA Jessie came out last month and we've been super busy working on version 14 of the TurnKey GNU/Linux library of apps which will be based on it. We're working hard to make this release kick ass, but we're a small crew so every bit of help we get from the community really puts in the wind in our sails! With that in mind, we've created release candidates for two basic building blocks: TurnKey Core: the common base system for all TurnKey apps TKLDev: the …https://www.turnkeylinux.org/node/16940/https://www.turnkeylinux.org/node/16940/Sat, 31 Jan 2015 13:56:25 +0000 A remotely exploitable, 14 year old bug in glibc has reared its ugly head: CVE-2014-0235 Security updates have been pushed out automatically, courtesy of Debian to TurnKey 13 installations. TurnKey 12 installations that have enabled Squeeze LTS support have also received an update. The catch is that running services need to be restarted for the security update to take effect. Read more: /blog/ghost-cve-2015-0235 Cheers, Liraz Siri TurnKey GNU/Linux GnuPG KeyID: 0xB06780D9 Fingerprint: 1B4D 4827 …https://www.turnkeylinux.org/node/15986/https://www.turnkeylinux.org/node/15986/Wed, 13 Aug 2014 18:39:23 +0000 Round of announcements: Security update regenerates stale SSH ECDSA host key Thanks to Peter Lieven from KAMP.de for discovering a stale ECDSA host key which was leftover from the build process. We've issued a security update to regenerate it automatically within the next 24 hours: /blog/ssh-ecdsa-security-update We have 16 new apps lined up for the upcoming 13.1 release: /apps-in-development These were all contributed by the community. Many thanks to Eric Young, John Carver, Martin …https://www.turnkeylinux.org/node/15985/https://www.turnkeylinux.org/node/15985/Wed, 13 Aug 2014 16:54:40 +0000 Round of announcements: Security update regenerates stale SSH ECDSA host key Thanks to Peter Lieven from KAMP.de for discovering a stale ECDSA host key which was leftover from the build process. We've issued a security update to regenerate it automatically within the next 24 hours: /blog/ssh-ecdsa-security-update We have 16 new apps lined up for the upcoming 13.1 release: /apps-in-development These were all contributed by the community. Many thanks to Eric Young, John Carver, Martin …https://www.turnkeylinux.org/node/15693/https://www.turnkeylinux.org/node/15693/Mon, 02 Jun 2014 18:38:33 +0000 Without action on your part, legacy TurnKey 12 / Debian 6.0 (AKA Squeeze) based systems will no longer receive automatic security updates. Next time there is a remotely exploitable security vulnerability your system could get compromised. If you're not ready to upgrade to Debian 7.0 you may want to consider manually enabling the new (experimental) LTS security updates. Read more: /blog/extending-squeeze-security-supporthttps://www.turnkeylinux.org/node/15364/https://www.turnkeylinux.org/node/15364/Wed, 09 Apr 2014 22:45:17 +0000 Without action, your TurnKey 13 installations may remain vulnerable to the critical Heartbleed OpenSSL attack (DSA-2896-1 CVE-2014-0160). This is not a theoretical attack. A remote exploit already exists in the wild. TurnKey installations are configured to install security updates automatically. Unfortunately, installing the update is not enough. Read more: /blog/heartbleedhttps://www.turnkeylinux.org/node/5475/https://www.turnkeylinux.org/node/5475/Wed, 20 Nov 2013 14:46:57 +0000 This is really two separate announcements rolled into one: TurnKey 13 - codenamed "satisfaction guaranteed or your money back!" The new release celebrates 5 years since TurnKey's launch. It's based on the latest version of Debian (7.2) and includes 1400 ready-to-use images, 330GB worth of 100% open source, guru integrated, Linux system goodness in 7 build types that are optimized and pre-tested for nearly any deployment scenario: bare metal, virtual machines and hypervisors of …https://www.turnkeylinux.org/node/5104/https://www.turnkeylinux.org/node/5104/Thu, 18 Jul 2013 15:57:32 +0000 Drumroll please! Today we're very proud to announce the culmination of a multi-year effort to re-engineer TurnKey's development infrastructure with the goal of democratizing it so that the project's development toolchain is available to everyone. The result is TKLDev, the new mother of all TurnKey appliances - a self-contained appliance that can be used to build any appliance (including itself) from source code. If you can handle running make you should be able to handle building an appliance: …https://www.turnkeylinux.org/node/5012/https://www.turnkeylinux.org/node/5012/Mon, 10 Jun 2013 07:24:57 +0000 Version 12.1 of the TurnKey Linux Virtual Appliance Library has been released. Highlights: First release to be built with tkldev - TurnKey's shiny new open appliance build system in a box. Appliances refreshed with the latest upstream software versions. The new release defaults to 64-bit (amd64) image builds. 32-bit (i386) images are still available though. The TurnKey Hub now fully supports larger, more powerful instance sizes. Read the full release announcement here: …https://www.turnkeylinux.org/node/4125/https://www.turnkeylinux.org/node/4125/Thu, 30 Aug 2012 08:47:07 +0000 The TurnKey Linux Virtual Appliance Library v12.0 has just been released with over 100 appliances. 60 new applications. 7 supported AWS datacenter regions. 7 supported build formats. 120 GBs worth of images just waiting to be rsynced from 25 high-speed mirrors in 16 countries. Get it while it's hot: /blog/turnkey-12 Cheers, Liraz Siri TurnKey Linux co-Founder Cell: +1 650 963 5581https://www.turnkeylinux.org/node/3179/https://www.turnkeylinux.org/node/3179/Thu, 23 Feb 2012 03:29:02 +0000 Meanwhile, deep underground, at our secret icy headquarters, the TurnKey winter elves have been working around the clock to bring you these special updates: 3 new officially supported TurnKey appliance builds types for the hottest, richest and most fashionable virtualization technologies! OpenVZ optimized builds (+ ProxMox VE channel): /blog/openvz-proxmox OpenStack optimized builds: /blog/announcing-openstack-builds Xen optimized builds: /blog/announcing-xen-builds Rsync the entire TurnKey …https://www.turnkeylinux.org/node/2970/https://www.turnkeylinux.org/node/2970/Tue, 06 Dec 2011 07:58:36 +0000 Dear user, Ho ho ho, happy holidays everyone! It's been ridiculously long since our last announcement. We've haven't been idle though. We just kept saying one more thing, and you know how time flies when you're having fun... Without further fanfare, here's a brief digest of TurnKey developments since our last announcement. TurnKey 11.3 maintenance release: includes the latest bug fixes, security updates rolled in, and built-in support for TurnKey's new dynamic DNS service. This will be the last …https://www.turnkeylinux.org/node/2402/https://www.turnkeylinux.org/node/2402/Mon, 20 Jun 2011 06:37:05 +0000 Dear user, It's been over two months since our last announcement. In part because we've been a bit too busy developing to notice how long it's been, but also because a lot of new features are coming out and we prefer big juicy announcements to small incremental ones. Those of you who want to stay abreast of the very latest developments are encouraged to subscribe to the blog. Highlights: Important security notice: Your TurnKey system may no longer be receiving automatic security updates due to …https://www.turnkeylinux.org/node/2172/https://www.turnkeylinux.org/node/2172/Wed, 30 Mar 2011 17:20:44 +0000 Dear user, We just released v1.0 of the TurnKey Hub, the free web service we've been developing this past 9 months that integrates TurnKey Linux with the Amazon Web Services cloud. The Hub powers two tightly integrated services: TurnKey Cloud Servers: allows you to rapidly explore and deploy TurnKey's 45+ free server apps in the Amazon EC2 cloud. No extra software or hardware required, just a browser. TurnKey Backup and Migration: provides secure and easy server backups to Amazon S3. Backups …https://www.turnkeylinux.org/node/1990/https://www.turnkeylinux.org/node/1990/Thu, 27 Jan 2011 11:24:28 +0000 Dear user, We just announced part one of the TurnKey Linux 11 release, spanning 45 ready-to-use solutions based on Ubuntu 10.04 LTS (Long Term Support - until April 2015): /blog/turnkeylinux-11-part1 Highlights: Includes TKLBAM: a smart, automated backup and restore facility, powered by the Amazon S3 storage cloud. The system is designed to make it easy to move or clone a TurnKey system anywhere along with any changed files, databases, packages and users. No default passwords: Users no longer …https://www.turnkeylinux.org/node/1654/https://www.turnkeylinux.org/node/1654/Wed, 27 Oct 2010 05:12:21 +0000 Dear user, Earlier this week we pushed out 38 release candidates for part 1 of the upcoming TurnKey Linux 11.0 release and we need your help testing them! /blog/turnkey-11.0rc-part1 Highlights: New versions of your favorite open source applications Upgraded to Ubuntu 10.04.1 (a Long Term Support version) Tight integration with TKLBAM, including a spiffy new Webmin module Passwords and basic configurations now set on first boot LVM (Logical Volume Management) support Check them out and share …https://www.turnkeylinux.org/node/1604/https://www.turnkeylinux.org/node/1604/Thu, 30 Sep 2010 18:16:50 +0000 A couple of quick updates: TurnKey appliance development contest is over: it was a wild success and will result in a near doubling of the TurnKey library in the upcoming release batch. You are all invited to vote on who should win and share your thoughts: /blog/contest-summary TKLBAM usage growing fast: despite the rapid growth spurt and media coverage we've managed to handle the increase in load without any slow-downs. If you don't yet have a TurnKey Hub account, request an invite here: …https://www.turnkeylinux.org/node/1544/https://www.turnkeylinux.org/node/1544/Wed, 08 Sep 2010 11:52:19 +0000 Dear user, Big news! We've officially unveiled TKLBAM (TurnKey Linux Backup and Migration), a new kind of smart automated backup and restore system that will make it super easy to test your backups "in the cloud", and migrate working systems anywhere in minutes: /blog/announcing-tklbam Technical documentation: /docs/tklbam Cheers, Liraz Siri Co-founder of TurnKey Linux Cell: +972-54-2013512https://www.turnkeylinux.org/node/1376/https://www.turnkeylinux.org/node/1376/Tue, 13 Jul 2010 06:58:06 +0000 Dear user, It's been a busy month. A couple of updates: Appliance development contest: In an attempt to put your donation money to good use, we announced yesterday an appliance development contest. To celebrate the occasion we'll be giving live training on how to customize existing TurnKey appliances and create new ones, so anyone willing to learn a few basic Linux skills is invited to join in on the fun. With your help we could potentially double the appliance library by the next release! …https://www.turnkeylinux.org/node/1302/https://www.turnkeylinux.org/node/1302/Thu, 03 Jun 2010 15:15:33 +0000 Dear user, Earlier this week, we launched the private beta of the TurnKey Hub, a simplified cloud deployment service that makes it easy to launch and manage TurnKey Linux appliances in the Amazon EC2 cloud. To learn more, try the demo and sign up for an invitation: https://hub.turnkeylinux.org/ Note, the feedback we've received so far has been good, so we'll be granting invitation requests on a daily basis for as long as we have the capacity to support it on a first come, first served basis. …https://www.turnkeylinux.org/node/1208/https://www.turnkeylinux.org/node/1208/Mon, 19 Apr 2010 09:11:54 +0000 Dear user, Last week TurnKey Linux came out of beta in its last release based on Ubuntu 8.04 LTS. Though Canonical will continue supporting Ubuntu 8.04 for another 3 years, all future releases of the virtual appliance library will be based on the upcoming Ubuntu 10.04 (Lucid) Long Term Support version. The current out-of-beta release features: Bugfixes for all outstanding issues Pre-installation of security updates Improved Amazon EC2 support: simplified free subscription, support for all …