Ubuntu rolls out php2shell, eMudhra certificate fixes

Ubuntu has released security updates for the php2shell PHP flaw that’s led to websites being taken offline, and a key compromise at the eMudhra certificate authority. Desktop Ubuntu isn’t directly affected by php2shell, since PHP isn’t installed by default. The certificate issue is more of a browser-based concern, though Google, Apple, Mozilla et al blocked the bad certificates on 17 October. Ubuntu’s ca-certificates package update removes two root certificates from the list Ubuntu trusts, both of whom had vouched for eMudhra. This…

Quelle: Originalartikel öffnen