https://www.turnkeylinux.org/v19-updates/Recent content from TurnKey GNU/Linuxen-UShttps://www.turnkeylinux.org/updates/new-turnkey-zoneminder-version-190/https://www.turnkeylinux.org/updates/new-turnkey-zoneminder-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Port to Debian 13 (Trixie). Install ZoneMinder 1.38.4 from upstream's signed release-1.38 Trixie package channel, superseding Debian's older package to include current stable security fixes. Update firstboot credentials, PHP timezone discovery, and the standard apt update check. Add v19 acceptance coverage for authenticated monitor management, persistence, services, and management endpoints. Links Release meta-files (signature, manifest)https://www.turnkeylinux.org/updates/new-turnkey-znuny-version-190/https://www.turnkeylinux.org/updates/new-turnkey-znuny-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Update the appliance base to Debian 13 (Trixie). Install the security-supported Znuny 6.5 LTS package from Debian and use its current permissions and cron contracts. Replace the CPAN build-time dependency with the Debian Mozilla CA package. Create the separately branded Znuny appliance while retaining Debian's package-owned OTRS-compatible runtime interfaces. Add a Debian package updater and v19 acceptance coverage for agent login, queues, mail-created tickets, MariaDB, background …https://www.turnkeylinux.org/updates/new-turnkey-zencart-version-190/https://www.turnkeylinux.org/updates/new-turnkey-zencart-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Port the appliance to Debian 13 (Trixie). Install pinned official Zen Cart v2.2.2 source with its published archive digest. Add a supervised updater for verified Zen Cart v2.2 patch releases. Preserve first-boot administrator configuration, the storefront, MariaDB, Apache, and local application mail behavior. Links Release meta-files (signature, manifest)https://www.turnkeylinux.org/updates/new-turnkey-yiiframework-version-190/https://www.turnkeylinux.org/updates/new-turnkey-yiiframework-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Install Yii 2.0.55 from its pinned official advanced-application release. Preserve the frontend and backend samples, Yii console, Apache HTTPS, and MariaDB application boundaries on Debian 13 Trixie. Add a supervised check for updates on the official Yii 2 release channel. See turnkey-core's 19.0 changelog for common platform changes. Links Release meta-files (signature, manifest)https://www.turnkeylinux.org/updates/new-turnkey-xoops-version-190/https://www.turnkeylinux.org/updates/new-turnkey-xoops-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Rebase the appliance on Debian 13/Trixie. Install XOOPS 2.7.3 from its pinned official release commit with archive integrity verification. Preserve the existing firstboot administrator and database credential contract while storing the administrator password with PHP's current password hash. Add a supervised updater for the official XOOPS 2.7 stable channel. Links Release meta-files (signature, manifest)https://www.turnkeylinux.org/updates/new-turnkey-wordpress-version-190/https://www.turnkeylinux.org/updates/new-turnkey-wordpress-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Update WordPress to latest upstream - v7.0.4. Upgraded base distribution to Debian 13.x/Trixie. Replace TurnKey custom Debian-Installer based 'di-live' with new custom TurnKey installer built from scratch; 'tkl-installer'. Updated release signing keys & apt repo keys - now included as 'turnkey-keys' deb package. Replace legacy '.list' apt remote config files with Deb822 '.sources' files. "Proper" IPv6 support. May still have some gaps and still requires cosmetic work but fully …https://www.turnkeylinux.org/updates/new-turnkey-web2py-version-190/https://www.turnkeylinux.org/updates/new-turnkey-web2py-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Install the supported Web2py 3.3.3 release from its pinned official Git tag and recorded submodule commits. Add a supervised Web2py 3.x update command. Preserve the Apache WSGI, HTTPS administration, and MariaDB application boundaries on Debian 13 Trixie. See turnkey-core's 19.0 changelog for common platform changes. Links Release meta-files (signature, manifest)https://www.turnkeylinux.org/updates/new-turnkey-wireguard-version-190/https://www.turnkeylinux.org/updates/new-turnkey-wireguard-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Document the fact that 0.0.0.0/0 is an invalid setting. Closes #1754. Links Release meta-files (signature, manifest)https://www.turnkeylinux.org/updates/new-turnkey-openvpn-version-190/https://www.turnkeylinux.org/updates/new-turnkey-openvpn-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Install OpenVPN from Debian repos - v2.6.14. Fix (and updated deprecated) missing Cipher/Auth in server.conf - closes #2064. Update/modernize other default OpenVPN config, including increased key size. A future release will likely move to eliptic curve algorithm; e.g. ecp384r1. Move masquerade firewall config to systemd service rather than Webmin. Allows separation of default/shared TurnKey firewall rules (disabled by default as per all other apps) and OpenVPN specific conf. Include …https://www.turnkeylinux.org/updates/new-turnkey-ushahidi-version-190/https://www.turnkeylinux.org/updates/new-turnkey-ushahidi-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Port to Debian 13 (Trixie). Update Ushahidi Platform to the pinned official v6.0.17 release. Add a supervised updater for official Ushahidi v6 stable patches. Update Laravel from v8.83.27 to the official v8.83.29 stable tag, including the CVE-2024-52301 backport released in v8.83.28. Retain the complete official Laravel 8.x Git repository and add a separate stable-tag updater with check, dry-run, atomic activation, automatic rollback, explicit recovery, ancestry verification, and …https://www.turnkeylinux.org/updates/new-turnkey-typo3-version-190/https://www.turnkeylinux.org/updates/new-turnkey-typo3-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Upgrade the appliance base to Debian 13/Trixie. Install TYPO3 13.4.34 LTS and the Introduction Package from an exact Composer dependency lock. Add a supervised TYPO3 13.4 LTS update command with official release metadata validation, dependency updates, database setup and cache flush. Schedule TYPO3 task processing through cron. Add focused v19 tests for HTTPS admin login, page creation and public read, MariaDB persistence, frontend assets, scheduled tasks and updates. Links Release …https://www.turnkeylinux.org/updates/new-turnkey-torrentserver-version-190/https://www.turnkeylinux.org/updates/new-turnkey-torrentserver-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Update the appliance to Debian 13/Trixie and Debian's Transmission 4.1 package series. Keep Transmission credentials out of process arguments and configure its authenticated RPC, storage, completion scan, and peer port explicitly. Replace stale rTorrent service residue with a Transmission lifecycle test. Links Release meta-files (signature, manifest)https://www.turnkeylinux.org/updates/new-turnkey-tomcat-apache-version-190/https://www.turnkeylinux.org/updates/new-turnkey-tomcat-apache-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Update the appliance for Debian 13 Trixie packages, including Tomcat 10.1, Apache 2.4 and OpenJDK 21. Preserve the localhost AJP connector, Apache mod_jk integration, firstboot manager credentials and documented control panel deployment. Add focused runtime acceptance for Apache-to-Tomcat requests, manager authentication, JSP deployment, MariaDB, Webmin and APT updates. Links Release meta-files (signature, manifest)https://www.turnkeylinux.org/updates/new-turnkey-tkldev-version-190/https://www.turnkeylinux.org/updates/new-turnkey-tkldev-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Upgraded base distribution to Debian 13.x/Trixie. Update squid https proxy CA cert config so it generates a CA cert that is valid against current requirements. TurnKey build tool (fab): Bugfix: Fix removelist bug where non-file non-dirs (e.g. symlinks or file-sockets) would not be removed. New contrib convenience scripts for improved app-dev flow: fab-investigate: Interactivly enter and investigate an appliance chroot (fab-chroot with some extra setup and tear down). fab-rewind: Wind …https://www.turnkeylinux.org/updates/new-turnkey-syncthing-version-190/https://www.turnkeylinux.org/updates/new-turnkey-syncthing-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Upgrade the base distribution to Debian 13/Trixie. Use the Debian Trixie Syncthing package and signed APT update path instead of the third-party Syncthing repository. Preserve the firstboot-authenticated web interface, Nginx TLS proxy, default synchronization folder and supervised update workflow. See the TurnKey Core 19.0 changelog for changes common to all appliances. Links Release meta-files (signature, manifest)https://www.turnkeylinux.org/updates/new-turnkey-symfony-version-190/https://www.turnkeylinux.org/updates/new-turnkey-symfony-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Rebase the appliance on Debian 13/Trixie. Install the official Symfony 7.4 LTS skeleton and pin FrameworkBundle v7.4.17 with verified source provenance. Replace the vendor welcome patch with a small sample application that exercises framework routing and MariaDB through Doctrine DBAL. Remove the third-party Symfony CLI repository. Use Debian Composer and provide safe framework console and supervised LTS updater helpers. Keep generated database credentials outside build tracing. Links …https://www.turnkeylinux.org/updates/new-turnkey-suitecrm-version-190/https://www.turnkeylinux.org/updates/new-turnkey-suitecrm-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Install the official SuiteCRM 8.10.2 production release with its pinned SHA-256 digest. Add a supervised updater for the official stable release channel. Use the SuiteCRM 8 scheduler command and add PHP modules required by the supported upstream runtime on Debian Trixie. Preserve and regenerate application secrets during first boot. Upgrade the base distribution to Debian 13/Trixie. Links Release meta-files (signature, manifest)https://www.turnkeylinux.org/updates/new-turnkey-tomcat-version-190/https://www.turnkeylinux.org/updates/new-turnkey-tomcat-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Update the standalone appliance for Debian 13 Trixie packages, including Tomcat 10.1 and OpenJDK 21. Update the bundled Tomcat documentation link for the packaged release. Add focused runtime acceptance for the Tomcat managers, direct HTTP and HTTPS connectors, WAR deployment, MariaDB, Webmin and APT updates. Links Release meta-files (signature, manifest)https://www.turnkeylinux.org/updates/new-turnkey-snipe-it-version-190/https://www.turnkeylinux.org/updates/new-turnkey-snipe-it-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Install the official Snipe-IT 8.6.3 release from its pinned Git commit. Upgrade the base distribution to Debian 13/Trixie with PHP 8.4, MariaDB, Redis, Composer and supporting packages from signed repositories. Add Redis queue supervision, scheduled maintenance and a supervised official update command that binds upgrades to a verified stable tag. Keep generated database credentials out of build tracing. Links Release meta-files (signature, manifest)https://www.turnkeylinux.org/updates/new-turnkey-simplemachines-version-190/https://www.turnkeylinux.org/updates/new-turnkey-simplemachines-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Rebuild on Debian 13 (Trixie) with Simple Machines Forum 2.1.7. Pin and verify the official upstream source archive during the build. Apply the official upstream fresh-session login correction for SMF 2.1.7. Add a supervised release discovery command for application updates. Update database provisioning for current MariaDB syntax. Links Release meta-files (signature, manifest)https://www.turnkeylinux.org/updates/new-turnkey-silverstripe-version-190/https://www.turnkeylinux.org/updates/new-turnkey-silverstripe-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Install Silverstripe CMS 6.2.0 from its pinned official release tag and supported Composer patch channel. Restore firstboot administrator credentials, the public webroot, page and asset publishing, and MariaDB persistence on Debian 13 Trixie with PHP 8.4. Add a supervised Silverstripe update helper and focused v19 acceptance coverage. Links Release meta-files (signature, manifest)https://www.turnkeylinux.org/updates/new-turnkey-rails-version-190/https://www.turnkeylinux.org/updates/new-turnkey-rails-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Rebuild on Debian 13 Trixie. Use Debian packages for Ruby 3.3, Rails 7.2 and Phusion Passenger 6. Generate the example application from the packaged Rails stack and lock its dependencies from locally installed Debian gems. Update the Apache Passenger integration and retain MariaDB production, development and test databases. Refresh the example landing page and first-boot Rails credential rotation. Links Release meta-files (signature, manifest)https://www.turnkeylinux.org/updates/new-turnkey-roundup-version-190/https://www.turnkeylinux.org/updates/new-turnkey-roundup-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Upgrade the base distribution to Debian 13/Trixie. Update Roundup to 2.6.0 from its verified official PyPI source distribution and use Debian packages for its Python runtime, MariaDB driver and timezone data. Replace the obsolete installer with a supervised updater that verifies PyPI release metadata and runs the tracker migration. Use Roundup's password API for the firstboot administrator credential. See the TurnKey Core 19.0 changelog for changes common to all appliances. Links …https://www.turnkeylinux.org/updates/new-turnkey-redmine-version-190/https://www.turnkeylinux.org/updates/new-turnkey-redmine-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Install latest upstream version of Redmine: 7.0.0 Update other relevant dependencies/tools: ruby: v3.4.10 rbenv: v1.3.2 yarn: v1.22.22 Upgraded base distribution to Debian 13.x/Trixie. Replace TurnKey custom Debian-Installer based 'di-live' with new custom TurnKey installer built from scratch; 'tkl-installer'. Updated release signing keys & apt repo keys - now included as 'turnkey-keys' deb package. Replace legacy '.list' apt remote config files with Deb822 '.sources' files. …https://www.turnkeylinux.org/updates/new-turnkey-redis-version-190/https://www.turnkeylinux.org/updates/new-turnkey-redis-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Upgrade the base distribution to Debian 13/Trixie. Update Redis to Debian's 8.0 series. Use Debian's Node.js and npm packages for the management application runtime. Install Redis Commander from its maintained npm registry release with dependency integrity metadata and a supported npm update path. Preserve the selected Redis network binding and reliably reload the first-boot Redis Commander credentials. Start Nginx after first-boot TLS certificate generation so Redis Commander is …https://www.turnkeylinux.org/updates/new-turnkey-processwire-version-190/https://www.turnkeylinux.org/updates/new-turnkey-processwire-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Install ProcessWire 3.0.258 and the beginner site profile from integrity-pinned official upstream archives. Add a supervised ProcessWire core update command with a non-destructive stable-channel check. Upgrade the base distribution to Debian 13/Trixie with PHP 8.4 and MariaDB from signed Debian repositories. Links Release meta-files (signature, manifest)https://www.turnkeylinux.org/updates/new-turnkey-prestashop-version-190/https://www.turnkeylinux.org/updates/new-turnkey-prestashop-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Update to the supported upstream PrestaShop 9.1.5 security release. Install the official Update Assistant 7.6.5 release. Verify both official upstream archives with pinned SHA-256 digests. Support Debian 13/Trixie, including PHP 8.4 and MariaDB 11.8. Update firstboot secret and administrator password handling for PrestaShop 9. Links Release meta-files (signature, manifest)https://www.turnkeylinux.org/updates/new-turnkey-postgresql-version-190/https://www.turnkeylinux.org/updates/new-turnkey-postgresql-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Upgraded base distribution to Debian 13.x/Trixie. Replace TurnKey custom Debian-Installer based 'di-live' with new custom TurnKey installer built from scratch; 'tkl-installer'. Updated release signing keys & apt repo keys - now included as 'turnkey-keys' deb package. Replace legacy '.list' apt remote config files with Deb822 '.sources' files. "Proper" IPv6 support. May still have some gaps and still requires cosmetic work but fully functional. Improved fail2ban config: Increased …https://www.turnkeylinux.org/updates/new-turnkey-phplist-version-190/https://www.turnkeylinux.org/updates/new-turnkey-phplist-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Update phpList to v3.7.0 from the official upstream release and verify its published SHA-256 digest. Adapt the appliance to Debian 13/Trixie and PHP 8.4. Use phpList's bundled IMAP fallback because Debian no longer provides the legacy PHP IMAP extension. Schedule command-line queue processing and add a supervised TurnKey phpList update command. Upgrade the base distribution to Debian 13/Trixie. Links Release meta-files (signature, manifest)https://www.turnkeylinux.org/updates/new-turnkey-phpbb-version-190/https://www.turnkeylinux.org/updates/new-turnkey-phpbb-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Update phpBB to the official 3.3.17 release and verify the source archive against its published SHA-256 checksum. Port the installer, Apache configuration, and firstboot password handling to Debian 13/Trixie, PHP 8.4, and MariaDB 11.8. Add an HTTPS-only check for the latest stable phpBB release and its official package checksum. Links Release meta-files (signature, manifest)