Action required

Hi CloudronUser,

As you are probably aware by now, two security issues hit on 21 Oct 2026. PHP RCE (CERT-EU) and the eMudhra cert compromise (details).

In response, we have updated all app packages and made a new Cloudron release. You can read about the background and our response in this forum thread.

Here's what to do to protect your Cloudron installation, in order of importance:

1. Every Cloudron package has been rebuilt to fix the vulnerabilities. Install any pending app updates that were not yet applied.
2. Ubuntu has already published an updated certificate store and this change is most likely on your server already. Confirm it anyway using the commands in the forum thread.
3. Update Cloudron to 10.1.6. This is still being rolled out. Your installation is still secure even if you don't immediately update to 10.1.6.

Don't hesitate to ask on the forum if something is unclear.

Team Cloudron.io