@malwaretech I truly truly can't believe that Ubuntu still has not fixed this despite it being such a critical security issue. Everything else I had was already fixed by the time I saw it. Ironically I put a server on Ubuntu (many years ago) because I thought it would offer better long term security support. Hah... Starting to regret that now.

If I was a big business I'd potentially consider suing Canonical for just sitting on their duffs for this.