{"id":4144,"date":"2026-10-22T02:00:48","date_gmt":"2026-10-22T02:00:48","guid":{"rendered":"https:\/\/serverhost.com\/blog\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\/"},"modified":"2026-10-22T02:00:48","modified_gmt":"2026-10-22T02:00:48","slug":"ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates","status":"publish","type":"post","link":"https:\/\/serverhost.com\/blog\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\/","title":{"rendered":"Ubuntu Rolls Out php2shell Security Fixes and eMudhra Certificate Updates"},"content":{"rendered":"<p>Ubuntu has issued security updates addressing two serious issues: the php2shell vulnerabilities in PHP and a compromise involving certificate authority eMudhra.<\/p>\n<p>The php2shell flaws, tracked as <a target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/ubuntu.com\/security\/notices\">CVE-2026-109618 and CVE-2026-109619<\/a>, could let an attacker with network access run code through a vulnerable PHP application without logging in. PHP powers roughly <a target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/w3techs.com\/technologies\/details\/pl-php\">70% of websites<\/a>, making the vulnerabilities potentially far-reaching. They have a critical CVSS 4.0 rating of 9.2, and <a target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/blog.cloudflare.com\/php-vulnerabilities-waf-protection\">Cloudflare has reported seeing attack traffic<\/a>.<\/p>\n<p>The eMudhra compromise could allow attackers to create fraudulent website certificates and impersonate legitimate servers. Ubuntu\u2019s update to <code>ca-certificates<\/code> removes two root certificates that had vouched for eMudhra. This helps protect tools such as <code>curl<\/code> and <code>wget<\/code>, which rely on the system\u2019s trusted certificate list. Major browser vendors had already blocked the affected certificates.<\/p>\n<p>Desktop Ubuntu systems are not directly exposed to php2shell because PHP is not installed by default. However, the certificate update applies more broadly. Check for updates using Software Updater, or run:<\/p>\n<pre><code class=\"language-bash\">sudo apt update &amp;&amp; sudo apt upgrade<\/code><\/pre>\n<p>If you manage an Ubuntu server or another system that may use PHP, install the updates promptly. Supported Ubuntu releases from 14.04 LTS through 26.10 receive the fixes, though Ubuntu 14.04, 16.04 and 18.04 require Ubuntu Pro. On servers where a full system upgrade or reboot is not practical, PHP can be updated separately; Canonical recommends restarting services that use PHP if the system is not rebooted.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Ubuntu has issued security updates addressing two serious issues: the php2shell vulnerabilities in PHP and a compromise involving certificate authority eMudhra. The php2shell flaws,&hellip;<\/p>\n","protected":false},"author":0,"featured_media":4145,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,1276,1098,203],"tags":[],"class_list":["post-4144","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","category-php","category-security-fixes","category-ubuntu-pro"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Ubuntu Rolls Out php2shell Security Fixes and eMudhra Certificate Updates - ServerHost Hosting Solutions Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/serverhost.com\/blog\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ubuntu Rolls Out php2shell Security Fixes and eMudhra Certificate Updates - ServerHost Hosting Solutions Blog\" \/>\n<meta property=\"og:description\" content=\"Ubuntu has issued security updates addressing two serious issues: the php2shell vulnerabilities in PHP and a compromise involving certificate authority eMudhra. The php2shell flaws,&hellip;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/serverhost.com\/blog\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\/\" \/>\n<meta property=\"og:site_name\" content=\"ServerHost Hosting Solutions Blog\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-22T02:00:48+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/serverhost.com\\\/blog\\\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/serverhost.com\\\/blog\\\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\\\/\"},\"author\":{\"name\":\"\",\"@id\":\"\"},\"headline\":\"Ubuntu Rolls Out php2shell Security Fixes and eMudhra Certificate Updates\",\"datePublished\":\"2026-10-22T02:00:48+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/serverhost.com\\\/blog\\\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\\\/\"},\"wordCount\":232,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/serverhost.com\\\/blog\\\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/serverhost.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/fbdd77a9-7e63-4faa-a5aa-2619d2e5537f.webp\",\"articleSection\":[\"News\",\"Php\",\"Security Fixes\",\"Ubuntu Pro\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/serverhost.com\\\/blog\\\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/serverhost.com\\\/blog\\\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\\\/\",\"url\":\"https:\\\/\\\/serverhost.com\\\/blog\\\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\\\/\",\"name\":\"Ubuntu Rolls Out php2shell Security Fixes and eMudhra Certificate Updates - ServerHost Hosting Solutions Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/serverhost.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/serverhost.com\\\/blog\\\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/serverhost.com\\\/blog\\\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/serverhost.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/fbdd77a9-7e63-4faa-a5aa-2619d2e5537f.webp\",\"datePublished\":\"2026-10-22T02:00:48+00:00\",\"author\":{\"@id\":\"\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/serverhost.com\\\/blog\\\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/serverhost.com\\\/blog\\\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/serverhost.com\\\/blog\\\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\\\/#primaryimage\",\"url\":\"https:\\\/\\\/serverhost.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/fbdd77a9-7e63-4faa-a5aa-2619d2e5537f.webp\",\"contentUrl\":\"https:\\\/\\\/serverhost.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/fbdd77a9-7e63-4faa-a5aa-2619d2e5537f.webp\",\"width\":1920,\"height\":1006},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/serverhost.com\\\/blog\\\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/serverhost.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ubuntu Rolls Out php2shell Security Fixes and eMudhra Certificate Updates\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/serverhost.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/serverhost.com\\\/blog\\\/\",\"name\":\"ServerHost Hosting Solutions Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/serverhost.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Ubuntu Rolls Out php2shell Security Fixes and eMudhra Certificate Updates - ServerHost Hosting Solutions Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/serverhost.com\/blog\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\/","og_locale":"en_US","og_type":"article","og_title":"Ubuntu Rolls Out php2shell Security Fixes and eMudhra Certificate Updates - ServerHost Hosting Solutions Blog","og_description":"Ubuntu has issued security updates addressing two serious issues: the php2shell vulnerabilities in PHP and a compromise involving certificate authority eMudhra. The php2shell flaws,&hellip;","og_url":"https:\/\/serverhost.com\/blog\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\/","og_site_name":"ServerHost Hosting Solutions Blog","article_published_time":"2026-10-22T02:00:48+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/serverhost.com\/blog\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\/#article","isPartOf":{"@id":"https:\/\/serverhost.com\/blog\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\/"},"author":{"name":"","@id":""},"headline":"Ubuntu Rolls Out php2shell Security Fixes and eMudhra Certificate Updates","datePublished":"2026-10-22T02:00:48+00:00","mainEntityOfPage":{"@id":"https:\/\/serverhost.com\/blog\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\/"},"wordCount":232,"commentCount":0,"image":{"@id":"https:\/\/serverhost.com\/blog\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\/#primaryimage"},"thumbnailUrl":"https:\/\/serverhost.com\/blog\/wp-content\/uploads\/2026\/10\/fbdd77a9-7e63-4faa-a5aa-2619d2e5537f.webp","articleSection":["News","Php","Security Fixes","Ubuntu Pro"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/serverhost.com\/blog\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/serverhost.com\/blog\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\/","url":"https:\/\/serverhost.com\/blog\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\/","name":"Ubuntu Rolls Out php2shell Security Fixes and eMudhra Certificate Updates - ServerHost Hosting Solutions Blog","isPartOf":{"@id":"https:\/\/serverhost.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/serverhost.com\/blog\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\/#primaryimage"},"image":{"@id":"https:\/\/serverhost.com\/blog\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\/#primaryimage"},"thumbnailUrl":"https:\/\/serverhost.com\/blog\/wp-content\/uploads\/2026\/10\/fbdd77a9-7e63-4faa-a5aa-2619d2e5537f.webp","datePublished":"2026-10-22T02:00:48+00:00","author":{"@id":""},"breadcrumb":{"@id":"https:\/\/serverhost.com\/blog\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/serverhost.com\/blog\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/serverhost.com\/blog\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\/#primaryimage","url":"https:\/\/serverhost.com\/blog\/wp-content\/uploads\/2026\/10\/fbdd77a9-7e63-4faa-a5aa-2619d2e5537f.webp","contentUrl":"https:\/\/serverhost.com\/blog\/wp-content\/uploads\/2026\/10\/fbdd77a9-7e63-4faa-a5aa-2619d2e5537f.webp","width":1920,"height":1006},{"@type":"BreadcrumbList","@id":"https:\/\/serverhost.com\/blog\/ubuntu-rolls-out-php2shell-security-fixes-and-emudhra-certificate-updates\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/serverhost.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Ubuntu Rolls Out php2shell Security Fixes and eMudhra Certificate Updates"}]},{"@type":"WebSite","@id":"https:\/\/serverhost.com\/blog\/#website","url":"https:\/\/serverhost.com\/blog\/","name":"ServerHost Hosting Solutions Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/serverhost.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/serverhost.com\/blog\/wp-json\/wp\/v2\/posts\/4144","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/serverhost.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/serverhost.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/serverhost.com\/blog\/wp-json\/wp\/v2\/comments?post=4144"}],"version-history":[{"count":0,"href":"https:\/\/serverhost.com\/blog\/wp-json\/wp\/v2\/posts\/4144\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/serverhost.com\/blog\/wp-json\/wp\/v2\/media\/4145"}],"wp:attachment":[{"href":"https:\/\/serverhost.com\/blog\/wp-json\/wp\/v2\/media?parent=4144"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/serverhost.com\/blog\/wp-json\/wp\/v2\/categories?post=4144"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/serverhost.com\/blog\/wp-json\/wp\/v2\/tags?post=4144"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}