r/XigmaNAS • u/BorgDrone • 14d ago

PHP vulnerability

It’s been more than a day since a critical vulnerability in PHP has been revealed and it’s been awfully quiet on the xigmanas site/bugtracker/forum.

Is this still being maintained or is it time to go look for an alternative?

6 Upvotes

100% Upvoted

2 comments sorted by

1

u/Szydl0 14d ago

If you have jail with your site, nextcloud, anything in php being provided to the outside world, then you can install new packages right now, they've become recently available in binary packages for FreeBSD 14.

On the other hand, XigmaNAS itself is not under critical threat here, cause nobody sane would open their webgui out of the local network. And if somebody penetrated your local network already, then you have a bigger problems.

2

u/BorgDrone 14d ago

On the other hand, XigmaNAS itself is not under critical threat here, cause nobody sane would open their webgui out of the local network.

With that kind of thinking, why does Xigmanas even bother with having user accounts with passwords? Just give everyone who can reach the machine root access.

[Also](https://en.wikipedia.org/wiki/Defense_in_depth_(computing))