Ubuntu rolls out php2shell, eMudhra certificate fixes

Ubuntu has released security updates for the php2shell PHP flaw that’s led to websites being taken offline, and a key compromise at the eMudhra certificate authority. Desktop Ubuntu isn’t directly affected by php2shell, since PHP isn’t installed by default. The certificate issue is more of a browser-based concern, though Google, Apple, Mozilla et al blocked the bad certificates on 17 October. Ubuntu’s ca-certificates package update removes two root certificates from the list Ubuntu trusts, both of whom had vouched for eMudhra. This will help protect tools like curl and wget that don’t use their own lists. Open Software Updater to check for […]

You're reading Ubuntu rolls out php2shell, eMudhra certificate fixes, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.