Ventoy Security Concerns

anon94117004 · August 8, 2025, 3:15pm

Their GitHub repo is just the prebuilts, they have all the sources and scripts to compile on their GitLab.
It could still be better eg. reproducibly compiled by CI, but it is a step in the right direction

Julie · August 16, 2025, 8:18pm

Also check the tested iso page:

github.com/Mexit/MultiOS-USB

docs/Supported_OS.md

0d1bd8f76

## List of tested ISO images (in the process of updating)
Note: MultiOS-USB automatically reads the configuration and allows you to run your distribution from all compatible ISO images (loopback.cfg support = yes). This configuration is located in the ISO image in the /boot/grub/loopback.cfg file.

Below is just a list of tested and working systems. The actual number of supported systems is much larger. I can't test them all.

| Distro | ISO | Boot from exFAT | loopback.cfg support | Secure Boot support | SB from |
|---|---|:---:|:---:|:---:|---|
| [Arch Linux](https://archlinux.org) | [archlinux-2024.03.01-x86_64.iso](https://archlinux.mirrors.ovh.net/archlinux/iso/latest/archlinux-2024.03.01-x86_64.iso) | yes | yes | no | - |
| [ArcoLinux](https://www.arcolinux.info) | [arcolinuxl-v24.03.01-x86_64.iso](https://downloads.sourceforge.net/arcolinux/arcolinuxl-v24.03.01-x86_64.iso) | yes | yes | no | - |
| [Athena OS](https://athenaos.org) | [athena-rolling-x86_64.iso](https://sourceforge.net/projects/athena-iso/files/v23.11/athena-rolling-x86_64.iso) | yes | [no](../config/athenaos) | no | - |
| [CachyOS](https://cachyos.org) | [cachyos-kde-linux-240313.iso](https://cdn.cachyos.org/ISO/kde/240313/cachyos-kde-linux-240313.iso) | yes | yes | no | - |
| [Clonezilla](https://clonezilla.org) | [clonezilla-live-3.1.3-11-amd64.iso](https://downloads.sourceforge.net/clonezilla/clonezilla-live-3.1.3-11-amd64.iso) | yes | [no](../config/clonezilla) | yes | Debian |
| [Damn Small Linux](https://damnsmalllinux.org) | [dsl-2024.rc1.iso](https://damnsmalllinux.org/download/dsl-2024.rc1.iso) | yes | [no](../config/damnsmalllinux) | no | - |
| [Debian](https://www.debian.org) | [debian-live-12.5.0-amd64-standard.iso](https://cdimage.debian.org/debian-cd/current-live/amd64/iso-hybrid/debian-live-12.5.0-amd64-standard.iso) | no | yes | yes | Debian |
|  | [debian-live-13.0.0-amd64-xfce.iso](https://cdimage.debian.org/debian-cd/13.0.0-live/amd64/iso-hybrid/debian-live-13.0.0-amd64-xfce.iso) | yes | yes | yes | Debian |
|  | [mini.iso](https://cdimage.debian.org/debian/dists/stable/main/installer-amd64/current/images/netboot/mini.iso) | no | [no](../config/debian) | yes | Debian |
| [Devuan](https://www.devuan.org) | devuan_daedalus_5.0.0_amd64_desktop-live.iso | no | [no](../config/devuan) | yes | Debian |
|  | devuan_daedalus_5.0.0_amd64_minimal-live.iso | no | [no](../config/devuan) | yes | Debian |
| [Dr.Parted Live](https://dr-parted-live.sourceforge.io) | [Dr.Parted-Live24.03.1-amd64.iso](https://sourceforge.net/projects/dr-parted-live/files/Download/Dr.Parted-Live24.03.1-amd64.iso) | no | [no](../config/dr-parted-live) | yes | Debian |
| [EndeavourOS](https://endeavouros.com) | [EndeavourOS_Gemini-2024.04.20.iso](https://mirror.alpix.eu/endeavouros/iso/EndeavourOS_Gemini-2024.04.20.iso) | yes | [no](../config/endeavourOS) | no | - |

This file has been truncated. show original

Topic		Replies	Views
Should Ventoy users be concerned? What remediations could users take? Questions software	12	5622	October 31, 2024
Live USB creator for Android General software	10	627	January 7, 2024
Trustworthy ISO copiers like Ventoy, Rufus Questions software	6	441	November 26, 2025
Onyx Titanium Software cleaning macOS Off Topic	5	393	March 19, 2025
Is it really foss? - Where Projects are Evaluated To see if they're as free and open source as advertised General website	27	1178	October 5, 2025

Ventoy Security Concerns

Related topics