<![CDATA[PHP security issue]]>Re: https://forum.cloudron.io/topic/16170/security-issue-thread-php-and-emudhra-cert-compromise/57
There is an update for the Nextcloud app already, which is great.
However, we're wondering whether it is safe to re-enable Nextcloud, given that Nextcloud itself contains lots of sub-apps.
What approach are folks taking?

]]>https://forum.cloudron.io/topic/16178/php-security-issueRSS for NodeFri, 23 Oct 2026 08:35:01 GMTThu, 22 Oct 2026 12:51:19 GMT60<![CDATA[Reply to PHP security issue on Thu, 22 Oct 2026 13:19:27 GMT]]>Excellent news, thanks so much @james (for the quick reply and all the work on this generally 🙏 ❤ )

]]>https://forum.cloudron.io/post/131605https://forum.cloudron.io/post/131605Thu, 22 Oct 2026 13:19:27 GMT<![CDATA[Reply to PHP security issue on Thu, 22 Oct 2026 13:14:30 GMT]]>Hello @da5nsy
With the latest package update from us https://forum.cloudron.io/topic/2474/nextcloud-package-updates/134 the Nextcloud app is using the newest version of PHP which fixed the CVE.
Meaning, also all apps from Nextcloud use the PHP version from the package.

]]>https://forum.cloudron.io/post/131604https://forum.cloudron.io/post/131604Thu, 22 Oct 2026 13:14:30 GMT