Ubuntu has released security updates for the php2shell PHP flaw that’s led to websites being taken offline, and a key compromise at the eMudhra certificate authority. Desktop Ubuntu isn’t directly affected by php2shell, since PHP isn’t installed by default. The certificate issue is more of a browser-based concern, though Google, Apple, Mozilla et al blocked the bad certificates on 17 October. Ubuntu’s ca-certificates package update does remove two root certificates from the list that Ubuntu trusts, both of which had vouched for eMudhra. That helps protect tools like curl and wget that don’t use their own lists. Open Software Updater to check […]

You’re reading Ubuntu rolls out php2shell, eMudhra certificate fixes, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.