Nextcloud

Incident resolved.

Updates are still in progress

Updates take longer then expected, 1/3 is done, eta is 1 more hour.

Updates are now running, eta is 30 minutes.

Due to two newly disclosed critical PHP vulnerabilities that may allow unauthenticated remote code execution, we have decided to temporarily disconnect our Nextcloud systems from the Internet.

We are aware that this is an inconvenient and disruptive measure. However, protecting the integrity and confidentiality of customer data has priority.

While patched PHP versions have already been released, the required update is not yet available in the official Nextcloud Docker image we use. We therefore do not want to keep the affected systems publicly accessible until an updated image is available.

As soon as the updated Nextcloud image is available, we will deploy it, verify the systems and restore public access as quickly as possible.

We apologize for the inconvenience and thank you for your understanding.