Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Search
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo

Cloudron Forum

Offical apps | Community apps | Demo | Docs | Install
J

Joseph Mascarenhas

@joseph
Staff
Unfollow Follow
Everything related to the PHP CVE and eMudhra Cert Please read our Security issue thread - PHP and eMudhra cert compromise.
About
Posts
2.0k
Topics
1
Shares
0
Groups
2
Followers
4
Following
1

Posts

Recent Best Controversial

  • Security issue thread - PHP and eMudhra cert compromise
    J joseph
    Announcements

    @p44 yes, there is a fix in https://git.cloudron.io/platform/box/-/commit/a213f095d15c060959a904516ddb0c22d6c0f3d7 for this in 10.1.6 .


  • Security issue thread - PHP and eMudhra cert compromise
    J joseph
    Announcements

    @p44 can you check the version of the WP developer instances? It is in the info tab.


  • Adding new devices isn’t working - createKey exited with error 1 signal null
    J joseph
    VPN

    @bazinga a Cloudron update is usually not needed. In this case, VPN package depends on some feature in 10.1.x


  • WordPress package version
    J joseph
    WordPress (Developer)

    @sebastienserre said:

    I thoughtI had a developer one, but trying to debug with CursorAI and it seems I have a Managed one...

    the earlier update command might have confused it . From your first screenshot, you have the developer wordpress (unmanaged).


  • Adding new devices isn’t working - createKey exited with error 1 signal null
    J joseph
    VPN

    @bazinga which Cloudron version are you on? Please update to 10.1.5 .


  • WordPress package version
    J joseph
    WordPress (Developer)

    @sebastienserre oh you are running the unmanaged version. can you try below?

    cloudron update --app $YOUR_LOCATION_OR_APPID --appstore-id org.wordpress.unmanaged.cloudronapp@3.17.0 --force
    

  • WordPress package version
    J joseph
    WordPress (Developer)

    @sebastienserre this is covered here https://forum.cloudron.io/topic/15950/stuck-on-old-version-unable-to-update-via-gui/2 . We published a wrong version 4.0.0 for a small time and it looks like your Cloudron got it. This happenned many months ago.

    cloudron update --app $YOUR_LOCATION_OR_APPID --appstore-id org.wordpress.unmanaged.cloudronapp@3.17.0 --force
    

  • Critical PHP RCEs (CVE-2026-109618 / CVE-2026-109619) – impact on Cloudron apps?
    J joseph
    Support packaging

    I will close this thread if that is OK. All the info is at https://forum.cloudron.io/topic/16170/security-issue-thread-php-and-emudhra-cert-compromise/ .


  • Global Security Issue
    J joseph
    Discuss security tls

    image.jpeg


  • Global Security Issue
    J joseph
    Discuss security tls

    The PHP issue seems to be rather more severe. Even https://nextcloud.com is down/gone.


  • Custom app will lose support, please use app store version
    J joseph
    Tymeslot

    @ekevu123 the way Cloudron appstore does this for "major notices" like this is to publish a major version of your app which is the same as the current one. The changelog of the major version says what you said in this post. Major version does not auto-update and the user will be forced to click the update manually and forced to reckon with the changelog.


  • Failed OpenWebUI Update
    J joseph
    Support

    This was confirmed as solved in support. @nightowlph maybe you can explain how.


  • Locked out of logging in to my cloudron server via SSH!
    J joseph
    Support

    I recently had to do exactly what @james said. Roughly, the idea is to boot from a flash drive. Then, identify your root disk and put your ssh keys in <mount>/root/.ssh/authorized_keys . Reboot, that's it!


  • GlitchTip
    J joseph
    Community Packages

    Also, I am told bugsink has a Sentry compatibility and we use a sentry module to interact with bugsink


  • GlitchTip
    J joseph
    Community Packages

    Do you know how this compares to bugsink? We use bugsink but would really like SSO.


  • Exclude certain paths from backup
    J joseph
    Mastodon

    IIUC, we have to move the cache of mastodon to a persistent dir correct? I will move this to mastodon.

    cc @james


  • Cypht - Lightweight open source webmail application written in PHP and JavaScript
    J joseph
    App Wishlist

    @jdaviescoates also, to check the location see the Help dropdown of the app. It's quite hidden.


  • Cypht - Lightweight open source webmail application written in PHP and JavaScript
    J joseph
    App Wishlist

    @jdaviescoates said:

    Quite possibly, but I can't see anywhere that I can actually check/ update the location of CloudronVersions.json 🤔

    You have use the CLI tool . cloudron update --versions-url <> --force . Is that what you are looking for?


  • Migrate from community app
    J joseph
    Tachyon

    Install Tachyon and then you can try Import backup of the community app backup


  • Tachyon now available
    J joseph
    Announcements

    The Cloudron mail app has a split screen UI I think. Though I use the traditional thunderbird one.

  • Login

  • Don't have an account? Register

  • Login or register to search.
  • First post
    Last post
0
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Search