Software

IPFire 2.15 Core 84 is a new stable release of the specialist distribution designed for firewalls. This is a release that fixes some security issues in the GNU Bash package which are commonly known as 'Shellshock' and it comes with more fixes and minor feature enhancements. As you may have already seen on the news, the Shellshock issues made more people look into the code of the default shell of many *nix systems. Those people found many more programming errors and provided fixes for them which have been applied in this release. IPFire is now shipping GNU Bash 4.3.30 and the companion library readline in version 6.3. There have been some denial of service issues in the Squid web proxy which have been fixed in release 3.4.8. Those are of minor severity only and quite possibly cannot be exploited to inject code. The firewall got a couple of new features which I explained in detail in a post on the IPFire planet. About IPFire IPFire is a Linux distribution that focusses on easy setup, good handling and high level of security. It is operated via an intuitive web-based interface which offers many configuration options for beginning and experienced system administrators. IPFire is maintained by developers who are concerned about security and who update the product regularly to keep it secure. IPFire ships with a custom package manager called Pakfire and the system can be expanded with various add-ons. Distribution Name IPFire Version 2.15 Architecture i586 Number of Media 1 Size 132 MB Media Type CD Software Type Linux http://www.ipfire.org/news/ipfire-2-15-core-update-84-released

Version 1.1.1 of Tails is a Debian-based specialist distribution and live CD designed for anonymous web browsing. Notable user-visible changes include: upgrade the web browser to 24.8.0esr (Firefox 24.8.0esr + Iceweasel patches + Torbrowser patches); add an I2P boot parameter, without adding 'i2p' to the kernel command line, I2P will not be accessible for the Live user; I2P was upgraded to 0.9.14.1 and stricter firewall rules are applied to it, among other security enhancements; upgrade Tor to 0.2.4.23 (fixes CVE-2014-5117); upgrade Linux kernel to 3.14.15 (fixes CVE-2014-3534, CVE-2014-4667 and CVE-2014-4943); prevent dhclient from sending the hostname over the network; override the hostname provided by the DHCP server. About Tails The Amnesic Incognito Live System (Tails) is a Debian-based live CD/USB with the goal of providing complete Internet anonymity for the user. The product ships with several Internet applications, including web browser, IRC client, mail client and instant messenger, all pre-configured with security in mind and with all traffic anonymised. To achieve this, Incognito uses the Tor network to make Internet traffic very hard to trace. Distribution Name Tails Version 1.1.1 Architecture i386 Number of Media 1 Size 908 MB Media Type DVD Software Type Linux https://tails.boum.org/news/version_1.1.1/index.en.html

Scientific Linux 7.0 is a distribution compiled from the source code for Red Hat Enterprise Linux 7. elrepo-release - this package contains the ELRepo driver yum repo and GPG key; epel-release - this package contains the EPEL driver yum repo and GPG key; OpenAFS - this package contains the OpenAFS driver and client utilities; SL_gdm_no_user_list - this package will disable the GDM user list in the chooser; SL_enable_serialconsole - will setup a serial console for login; SL_no_colorls - will disable the automatic colorized ls output; sl-bookmarks - replaces redhat-bookmarks and removes upstream branding... About Scientific Linux Scientific Linux is a recompiled Red Hat Enterprise Linux, co-developed by Fermi National Accelerator Laboratory and the European Organization for Nuclear Research (CERN). Although it aims to be fully compatible with Red Hat Enterprise Linux, it also provides additional packages not found in the upstream product; the most notable among these are various file systems, including Cluster Suite and Global File System (GFS), FUSE, OpenAFS, Squashfs and Unionfs, wireless networking support with Intel wireless firmware, MadWiFi and NDISwrapper, Sun Java and Java Development Kit (JDK), the lightweight IceWM window manager, R - a language and environment for statistical computing, and the Alpine email client. Distribution Name Scientific Linux Version 7.0 Architecture x86_64 Number of Media 1 Size 4 GB Media Type DVD Software Type Linux http://ftp.scientificlinux.org/linux/scientific/7.0/x86_64/release-notes/

Lunar Linux 1.7.0 is a source-based distribution with a complete application management system. New features in 1.7.0: out with sysvinit and in with systemd; Linux kernel 3.16.3, GCC 4.9.1 and glibc 2.19; added support for the Btrfs file system; GRUB 2 or LILO, pick your poison; improved installer; now with initrd support; a bunch of updated modules. About Lunar Linux Lunar is a source based Linux distribution with a unique package management system which builds each software package, or module, for the machine it is being installed on. Though it can take a while to do a complete Lunar installation it's worth it as it tends to be quite fast, once installed! In the beginning Lunar was a fork of Sorcerer GNU Linux (SGL). The fork occurred in late January to early February of 2002 and was originally made up of a small group of people who wanted to collaboratively develop and extend the Sorcerer technology. The original name for the project was Lunar-Penguin but the group decided to re-christen it Lunar Linux while the Lunar-Penguin name has become a sort of umbrella which the team could use if they decide to collaboratively develop something besides Lunar Linux. Code Name Sinus Successus Distribution Name Lunar Linux Version 1.7.0 Architecture x86_64 Number of Media 1 Size 361 MB Media Type CD Software Type Linux http://www.lunar-linux.org/2014/10/11/lunar-linux-1-7-0/

BackBox Linux 4.0 is a major new version of the distribution designed for penetration testing - now based on Ubuntu 14.04 LTS. This release includes features such as Linux kernel 3.13, EFI mode, anonymous mode, LVM + disk encryption installer, privacy additions and armhf Debian packages. What's new? New Ubuntu 14.04 base; handy Thunar custom actions; RAM wipe at shutdown and reboot; system improvements; upstream components; bug corrections; performance boost; improved anonymous mode; predisposition to ARM architecture (armhf Debian packages); predisposition to BackBox Cloud platform; new and updated hacking tools. About Backbox BackBox Linux is an Ubuntu-based distribution developed to perform penetration tests and security assessments. It is designed to be fast and easy to use. It provides a minimal yet complete desktop environment, thanks to its own software repositories, which are always updated to the latest stable versions of the most often used and best-known ethical hacking tools. Distribution Name Backbox Version 4.4 Architecture amd64 Number of Media 1 Size 1.8 GB Media Type DVD Software Type Linux http://www.backbox.org/blog/backbox-linux-4-released

ROSA R4 "Desktop Fresh" edition is a a desktop Linux distribution featuring a customised and user-friendly KDE 4.13.3 desktop. The distro presents a vast collection of games and emulators, as well as the Steam platform package along with standard suite of audio and video communications software, including the newest version of Skype. All modern video formats are supported. The distribution includes the fresh LibreOffice 4.3.1, the full TeX suite for true nerds, along with the best Linux desktop publishing, text editing and polygraphy WYSISYG software. The LAMP/C++/ development environments are waiting to be installed by true hackers. About ROSA ROSA is a Russian company developing a variety of Linux-based solutions. Its flagship product, ROSA Desktop, is a Linux distribution featuring a highly customised KDE desktop and a number of modifications designed to enhance the user-friendliness of the working environment. The company also develops an "Enterprise Server" edition of ROSA which is based on Red Hat Enterprise Linux. Distribution Name ROSA Version R4 Architecture x86_64 Number of Media 1 Size 1.6 GB Media Type DVD Software Type Linux http://www.rosalab.com/blogs/the-rosa-desktop-fresh-r4-is-finally-out

NetBSD 6.1.5 is the latest stable version of NetBSD incorporating fixes to all recent security vulnerabilities. Some of the critical security advisory fixes include: "libXfont multiple vulnerabilities; multiple OpenSSL vulnerabilities; bozohttpd basic http authentication bypass; multiple vulnerabilities in the execve system call; multiple vulnerabilities in the compatibility layers; user-controlled memory allocation in the modctl system call.. About NetBSD NetBSD is a free, secure, and highly portable UNIX-like Open Source operating system available for many platforms, from 64-bit AlphaServers and desktop systems to handheld and embedded devices. Its clean design and advanced features make it excellent in both production and research environments, and it is user-supported with complete source. Many applications are easily available through The NetBSD Packages Collection. Distribution Name NetBSD Version 6.1.5 Architecture amd64 Number of Media 1 Size 331 MB Media Type CD Software Type Linux http://www.netbsd.org/releases/formal-6/NetBSD-6.1.5.html

gNewSense 3.1 is a minor update of the project's Debian-based Linux distribution built strictly from free software as defined by Richard Stallman's Free Software Foundation. This is a minor update to the current stable version with code name 'Parkes'. These are the most important changes: the correct country-specific package repository (instead of the beta one) is set at installation time; NetworkManager is included on the live image by default; the expert installer no longer suggests to install Debian's non-free repository. Current users of gNewSense 3.0 don't have to reinstall as they get all the updates automatically. However, they should fix their repository configuration. That repository will be disabled next week, in order to start development on gNewSense 4. I urge you to update your software sources to the correct ones as soon as possible. About gNewSense A product sponsored by the Free Software Foundation, gNewSense is a Debian-based Linux distribution released without any proprietary and non-free components, and several enhancements. Notably, all proprietary firmware, restricted modules and Debian logos are removed. The goal of the project is to produce a totally free ("libre") Linux distribution. Distribution Name Gnewsense Version 3.1 Architecture amd64 Number of Media 1 Size 1.1 GB Media Type DVD Software Type Linux http://lists.nongnu.org/archive/html/gnewsense-users/2014-02/msg00002.html

CAINE 6.0 is a new version of the project's Ubuntu-based distribution and live DVD with an extensive selection of utilities for forensic analysis and penetration testing. CAINE offers a complete forensic environment that is organized to integrate existing software tools as software modules and to provide a friendly graphical interface. Changelog: Linux kernel 3.16; based on Ubuntu 14.04.1 64-bit edition, UEFI and Secure Boot ready; SystemBack is the new installer; fixed password request in polkit; fixed password request in text mode; ShellShock Bash bug fixed; mount policy always in read-only and loop mode; fstrim disabled; autopsy patched by Maxim Suhanov; HFS directories handling fixed; Sun VTOC volume system handling fixed.. About CAINE CAINE (Computer Aided INvestigative Environment) is an Ubuntu-based GNU/Linux live distribution created as a project of digital forensics. It offers a complete forensic environment that is organised to integrate existing software tools as software modules and to provide a friendly graphical interface. The main design objectives that CAINE aims to guarantee are: an interoperable environment that supports the digital investigator during the four phases of the digital investigation, a user-friendly graphical interface, and a semi-automated compilation of the final report. Code Name Dark Matter Distribution Name Caine Version 6.0 Architecture x86_64 Number of Media 1 Size 2.7 GB Media Type DVD Software Type Linux http://www.caine-live.net/

Untangle NG Firewall 11.0, a major new version of the project's Debian-based specialist distribution for firewalls and gateways. Firewall software, featuring industry-leading protection with its refreshed Virus Blocker and Spam Blocker applications. Untangle makes an integrated suite of security software and appliances with enterprise-grade capabilities and consumer-oriented simplicity. With this release, Untangle NG Firewall offers improved performance via technology transfer from Untangle’s IC Control product. Combined with a new kernel, NG Firewall also brings enhancements to both HTTPS processing and Captive Portal from the IC Control product. Additionally, Untangle NG Firewall version 11 offers: event logs for search queries on Google, Bing, Yahoo and Ask; improved license management; new Application Control signatures. About Untangle Untangle NG Firewall is a Debian-based network gateway with pluggable modules for network applications like spam blocking, web filtering, anti-virus, anti-spyware, intrusion prevention, VPN, SSL VPN, firewall, and more. Distribution Name Untangle Version 11.1 Architecture x64 Number of Media 1 Size 557 MB Media Type CD Software Type Linux FS0001878

GhostBSD 4.0 is a major new version of the project's FreeBSD-based operating system for the desktop, with MATE as the preferred desktop environment. This is the first release of the 4.x branch, which is based on FreeBSD 10 and which introduces some new features. Highlights: GCC is no longer installed by default, Clang is the default compiler; make(1) has been replaced with bmake(1) obtained from the NetBSD Project; pkg(7) is now the default package management utility; pkg_add(1), pkg_delete(1), bxpkg and related tools have been removed; Networkmgr is the default network manager; MATE is the default desktop; three workstation to choose from. GhostBSD 4.0-RELEASE is now available for the amd64 and i386 architectures, it can be installed from bootable ISO images or from USB memory sticks. About GhostBSD GhostBSD is a user-friendly desktop operating system based on FreeBSD. The project's goal is to create an easy-to-use and familiar workspace that can be used at home or office and for data rescue. GhostBSD supports a number of popular lightweight desktop environments, including MATE, Xfce, LXDE and Openbox. It also provides FreeBSD's package management system, Apache's OpenOffice.org, LibreOffice, LibreCAD, and Eclipse/Anjuta development environments for C, C++, Java, JavaScript, Jala and Python Distribution Name GhostBSD Version 4.0 Architecture amd64 Number of Media 1 Size 1.2 GB Media Type DVD Software Type Linux http://ghostbsd.org/4.0-release

KNOPPIX 7.4.2 is a security and bug-fix update which corrects the Shellshock vulnerability in Bash and several other security issues. Version 7.4.2 of KNOPPIX is based on the usual picks from Debian 'Wheezy' and newer desktop packages from Debian 'testing' and Debian 'unstable'. It uses Linux kernel 3.16.3 and X.Org Server 1.16.1 for supporting current computer hardware. Changes: security fixes in Firefox (Iceweasel 32.0.3), Chromium (37.0.2062.120); GNOME desktop starts again using boot option 'knoppix desktop=gnome', if supported by graphics card; patch for the Bash shell against the 'Shellshock' bug in the environment variable parser; updated udev (215) and dBUS (1.8.8) for automatic hardware management and autostart of systemd components, updated LibreOffice (4.3.2), GIMP (2.8.14), KDE libraries (4.8.4)... About KNOPPIX Knoppix is a bootable CD with a collection of GNU/Linux software, automatic hardware detection, and support for many graphics cards, sound cards, SCSI and USB devices and other peripherals. Knoppix can be used as a Linux demo, educational CD, rescue system, or adapted and used as a platform for commercial software product demos. It is not necessary to install anything on a hard disk. Due to on-the-fly decompression, the CD can have up to 2 GB of executable software installed on it. Distribution Name Knoppix Version 7.4.2 Architecture i486 Number of Media 1 Size 4.0 GB Media Type DVD Software Type Linux http://www.knopper.net/knoppix/knoppix742-en.html

Chakra GNU/Linux 2014.09 is a desktop Linux distribution that uses the Pacman package manager and features the latest KDE 4.14 desktop. A noticeable change in this release is the major face-lift of Kapudan, which now gives the option to users to enable the [extra] repository during first boot so they can easily install the most popular GTK+-based applications. As always, many updates to packages are available after installation. KDE Software Compilation: Chakra provides the latest stable version released by KDE, 4.14.1; dhcpcd has been replaced by dhclient as a dependency for NetworkManager. Core packages: Linux kernel 3.15.15, X.Org Server 1.15.2, systemd 216. About Chakra Chakra GNU/Linux is a user-friendly and powerful distribution and live CD originally forked from Arch Linux. It features a graphical installer, automatic hardware detection and configuration, the latest KDE desktop, and a variety of tools and extras. Code Name Euler Distribution Name Chakra Version 2014.09 Architecture x86_64 Number of Media 1 Size 1.7 GB Media Type DVD Software Type Linux http://chakraos.org/news/index.php?/archives/133-Chakra-2014.09-Euler-released.html

ExTiX 14.1 is an Ubuntu-based distribution with a customised GNOME 3.10 desktop environment. ExTiX 14.1 64-bit is based on Ubuntu 14.04. The original system includes the Unity desktop. After removing Unity I have installed GNOME 3.10 and GNOME Classic 3.10 (a perfect replacement for Cinnamon). The system language is English. The ExTiX ISO image is now a hybrid image, which means that it can be very easily transferred to a USB pen drive. You can then run ExTiX from the USB stick and save all your system changes on the stick. Another big improvement is that ExTiX 14.1 can run from RAM. Use boot option 3 (Copy to RAM). When the system has booted up you can remove the disc or the USB stick. You'll need at least 2 GB of RAM to run ExTiX that way. About ExTiX ExTiX is a desktop Linux distribution and live DVD based on Ubuntu and featuring a customised GNOME 3 desktop. Distribution Name ExTiX Version 14.1 Architecture 64bit Number of Media 1 Size 1.4 GB Media Type DVD Software Type Linux http://www.extix.se/

CentOS 5.11 is the distribution's final release in the 5.x branch. CentOS 5.11 is based on source code released by Red Hat, Inc. and it includes packages from all variants, including Server and Client. The Bash version included on the CentOS 5.11 ISO images is a version that contains the shellshock vulnerability. About CentOS CentOS as a group is a community of open source contributors and users. Typical CentOS users are organisations and individuals that do not need strong commercial support in order to achieve successful operation. CentOS is 100% compatible rebuild of the Red Hat Enterprise Linux, in full compliance with Red Hat's redistribution requirements. CentOS is for people who need an enterprise class operating system stability without the cost of certification and support. Distribution Name CentOS Version 5.11 Architecture x86_64 Number of Media 2 Size 5.4 GB Media Type DVD Software Type Linux http://lists.centos.org/pipermail/centos-announce/2014-September/020601.html

Netrunner 2014.09.1 "Rolling" edition is a Manjaro-based distribution featuring the KDE 4.14 desktop. This release updated Samba file sharing, Kontact accounts and language pack installation. Laptop Mode Tools was replaced by the new TLP to give you better control of your power consumption and achieve a longer battery life with your laptop. With the 2014.09 version we updated Netrunner Rolling to the latest software updates from Manjaro, including Linux kernel 3.14.18 with lots of bugs fixed and new driver support. KDE SC was updated to version 4.14. About Netrunner Netrunner is a Kubuntu-based distribution featuring a highly customised KDE desktop with extra applications, multimedia codecs, Flash and Java plugins, and a unique look and feel. The modifications are designed to enhance the user-friendliness of the desktop environment while still preserving the freedom to tweak. A separate "Rolling" edition, based on Manjaro Linux, was launched in 2014. Code Name Rolling Distribution Name Netrunner Version 2014.9.1 Architecture 64bit Number of Media 1 Size 2.3 GB Media Type DVD Software Type Linux http://www.netrunner-os.com/netrunner-rolling-2014-09-1/

OpenELEC 4.2 is a an updated build of the distribution designed for media centres, with separate editions built for Raspberry Pi and Apple TV. OpenELEC 4.2 is now based on Linux kernel 3.16, MESA 10.3, LLVM 3.5 and X.Org Server 1.16. We updated the NVIDIA graphic drivers in the 64-bit image to 340.x (32-bit remains on 304.123), systemd to 216 and XBMC to XBMC Gotham 13.2. About OpenELEC OpenELEC is a Linux-based embedded operating system built specifically to run XBMC, the open source entertainment media hub. The idea behind OpenELEC is to allow people to use their Home Theatre PC (HTPC) like any other device one might have attached to a TV, like a DVD player or Sky box. Instead of having to manage a full operating system, configure it and install the packages required to turn it into a hybrid media center, OpenELEC is designed to be simple to install, manage and use, making it more like running a set-top box than a full-blown computer. Distribution Name OpenElec Version 2.4 Architecture x86_64 Number of Media 1 Size 144 MB Media Type CD Software Type Linux http://openelec.tv/news/22-releases/139-openelec-4-2-0-released

OpenMandriva Lx 2014.1 is an updated version of the project's desktop Linux distribution that features a customised and intuitive KDE desktop. Inside you can find: Linux kernel 3.15.10 with a new nrjQL patchset, KDE 4.13.3, Firefox 32.0.3, X.Org Server 1.15.2, MESA 10.2.6; an updated Bash with the latest security fixes; many updates for drivers and other software. Most of our effort focused on system boot up time, which is around 17 seconds now (and if you have an SSD that comes to about 12 seconds) and also to reduce memory footprint significantly. About OpenMandriva The OpenMandriva distribution is a full-featured Linux desktop and server, sponsored by the OpenMandriva Association. It is based on ROSA, a Russian Linux distribution project which forked Mandriva Linux in 2012, incorporating many of Mandriva's original tools and utilities and adding in-house enhancements. The goal of OpenMandriva is to facilitate the creation, improvement, promotion and distribution of free and open-source software in general, and OpenMandriva projects in particular. Distribution Name OpenMandriva Version 2014.1 Architecture x86_64 Number of Media 1 Size 1.5 GB Media Type DVD Software Type Linux https://wiki.openmandriva.org/en/2014.1/Release_Notes

Oracle Linux 5.11 is a distribution rebuilt from source code of Red Hat Enterprise Linux 5.11, but shipping with a custom "unbreakable" kernel. This release includes the Unbreakable Enterprise Kernel Release 2 (2.6.39-400), Oracle's recommended kernel for Oracle Linux. Oracle Linux can be downloaded, used and distributed free of charge and updates and errata are freely available. For support, you are free to decide which of your systems you want to obtain a support subscription for, and at what level each system should be supported. About Oracle Linux Oracle Linux is an enterprise-class Linux distribution supported by Oracle and built from source packages for Red Hat Enterprise Linux (RHEL). Some of the special features of Oracle Linux include a custom-build and rigorously-tested Linux kernel called "Oracle Unbreakable Kernel", tight integration with Oracle's hardware and software products including most database applications, and "zero downtime patching" - a feature that enables administrators to update the kernel without a reboot Distribution Name Oracle Linux Version 5.11 Architecture x86_64 Number of Media 1 Size 4.0 GB Media Type DVD Software Type Linux https://oss.oracle.com/ol5/docs/RELEASE-NOTES-U11-en.html

ClearOS 6.5.0 "Community" edition is a CentOS-based distribution for cloud-connected servers and gateways designed for homes, hobbyists and small organisations. Along with the usual round of bug fixes and enhancements, the 6.5.0 release introduces QoS, marketplace enhancements, a network detail report, an administrators application, official Amazon EC2 support, a software RAID manager, a network map tool, UPnP support, an updated web server application, as well as new reporting features. Under the hood, some changes were made to support OwnCloud as well as web-based applications (Tiki Wiki, WordPress, Joomla, etc.). For businesses and organizations, ClearOS Professional 6.5.0 also includes: network map for business; Samba 4 and Samba Directory (beta). About ClearOS ClearOS Enterprise is a server, network, and gateway platform designed for small businesses and distributed enterprise environments. ClearOS Enterprise is based upon ClearOS Core which is a rebuild of Red Hat Enterprise Linux. The distribution is flexible and includes an extensive list of features and integrated services which can be configured through a web-based interface. Some of the tools found in ClearOS Enterprise include anti-virus, anti-spam, VPN, content filtering, bandwidth manager, file services, SMTP services, print services, SSL certification, and web services. ClearOS includes a marketplace which simplifies the installation of software including 3rd party modules. The distribution is provided as a free download, inclusive of basic OS updates with free registration. Code Name Community Distribution Name ClearOS Version 6.5.0 Architecture x86_64 Number of Media 1 Size 553 MB Media Type CD Software Type Linux http://www.clearfoundation.com/docs/release_info/clearos_community_6.5.0/final_release_information