PhpBB: the recently found vulnerability concerns those who enabled "avatar uploading" in the avatar settings. By default, it is disabled in H-Sphere. To fix the vulnerability, disable the "avatar uploading" setting.

Sudo: to fix the vulnerability:

1. Log into your control panel server as root:
   
   su -
2. Remove files of the previous patch:
   
   rm -f fix_sudo*
3. Download the patch package from our site:
   Linux:
   FreeBSD:
   
4. Unpack the archive:
   
   gunzip fix_sudo.gz
5. Run the script:
   
   /bin/sh fix_sudo