2026-10-21 16:27 UTC
The PHP project has released fixes for the vulnerabilities.
We urge you to update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35, released on 21.10.26.
Nextcloud AIO v14.4.1 and Nextcloud E-AIO v8.4.0 will include the updated PHP versions. We will publish these versions once the underlying base images are available.
Official advisory: https://www.php.net/index.php#2026-10-21-5
Replies (4)
-
@maya@gs.lexinova.eu 2026-10-21 16:30
@nextcloud@mastodon.xyz I really don't like that AIO is second class citizen, before this emergency update we still not have the .1 and .2 version ... and even in emergency update ....
-
@kobold@orthographieanarchist.de 2026-10-21 16:32
@nextcloud@mastodon.xyz Do you have an ETA for the new versions, as many #Nextcloud instances are currently offline.
-
@mikrobe@mastodon.social 2026-10-22 05:28
@nextcloud@mastodon.xyz #nextcloud #nextcloudaio #php I'd like to take this opportunity to say a big thank you—especially to the AIO team—for patching the software so quickly 👍
-
@borsti67@hub.hubzilla.de 2026-10-22 14:48
@nextcloud@mastodon.xyz Nextcloud AIO runs in Docker containers. Are these directly affected by the vulnerability, i.e. is it possible to escape and get into the host?