• Halloween is coming! To celebrate the occasion, we dusted off a couple of old skins, and even created a brand new one (Pixel).
    To get into the festive spirit, install the Skins extension.
  • The new Python extension is now available. It allows customers to deploy and manage WSGI-based Python applications on their websites directly from Plesk.
  • The Plesk Mobile apps for iOS and Android and the Plesk Mobile Center extension have been deprecated, and are no longer available for new installations. In Plesk Obsidian 18.0.84, the Plesk Mobile Center extension will be removed from servers during the upgrade, and the Plesk Mobile apps will lose their server management features.
  • The Social Login extension has been deprecated and will be removed in Plesk Obsidian 18.0.84. After that, it will no longer be possible to log in to Plesk with a Google, Facebook, GitHub account, or with a passkey. Plesk usernames and passwords, as well as logging in with a WebPros Account, are not affected.

Question PCI Compliance, remediate Linux 4.4 CVE-2018, etc

P

Paul Larson

Basic Pleskian
Title:
CPE Based Vulnerabilities for Linux 4.4

Impact:
One or more vulnerabilities have been found that affect this service. Please see the relevant CVEs for more details.

Resolution:
Apply the latest vendor patches to your operating system: Linux 4.4


CVE / Score
CVE-2018-10938 / 7.1
CVE-2016-2143 /6.9
CVE-2016-2854 /4.6
CVE-2017-7273 /4.6
CVE-2016-2853 /4.4

Image from PCI report: Screen Shot 2020-09-02 at 12.41.48 PM.png
 

Attachments

  • 1599068573900.png
    1599068573900.png
    325 bytes · Views: 4
  • 1599068574406.png
    1599068574406.png
    92 bytes · Views: 1
  • 1599068574044.png
    1599068574044.png
    94 bytes · Views: 2
  • 1599068574122.png
    1599068574122.png
    95 bytes · Views: 1
  • 1599068574198.png
    1599068574198.png
    204 bytes · Views: 1
  • 1599068574314.png
    1599068574314.png
    95 bytes · Views: 1
  • 1599068574269.png
    1599068574269.png
    95 bytes · Views: 0
  • 1599068574484.png
    1599068574484.png
    94 bytes · Views: 0
Could you please clarify how it is related to Plesk?
 
Sorry, I was wondering if any sort of PCI compliance resolver or Plesk updates (open ssh perhaps) might address those CVEs.

(Having trouble with the Plesk forum lately, or my browser forgetting cookies. I think a prior version of my post didn't go through)
 
You must log in or register to reply here.

Similar threads

P
Issue Can kernel be updated in Centos without breaking Plesk.
Replies
2
Views
3K
Bitpalast
Bitpalast
Back
Top