Nextcloud Security Scanner & Release Schedule?

[Sanook]

The Nextcloud Security Scanner displays for Nextcloud 25 “Major Version still supported” although the version is already EOL since 2022-10-19:

What does this mean?

Thank you!

[wwe]

Nexcloud security scanner keeps old results forever

Scan.nextcloud.com gives an A+ for a Nextcloud server with EOL version 24

I use icinga2 for monitoring various servers. One of the checks scans various Nextcloud versions for vulnerabilities via scan.nextcloud.com. I noticed that a Nextcloud version that I forgot to update still gets an A+ rating, even though Nextcloud version 24 is EOL or EOS. This makes the Security Scanner pretty useless. [screenshot]

take a look at “Scanned at…” and don’t forget to hit [trigger re-scan] button

Nextcloud Security Scan vs Installed Version mismatch

Hi, could someone please use the security scan with Nextcloud 25.0.5 which is available through internet and report their result? [image] [image]

How to maintain, check and improve the security of your Nextcloud installation?

Welcome to the Wiki. you are welcome to improve and extend this post You Nextcloud likely contains work and data you don’t want others can access to. There is not absolute security but you can follow some general measures to verify if you system is secure enough and doesn’t offer easy target to bad actors. update your system frequently the most important security measure is frequent updating. Often update include bug fixes and close security holes existed in previous versions. At th…

[Sanook]

@wwe

take a look at “Scanned at…” and don’t forget to hit [trigger re-scan] button

I have triggerd a rescan already of course before i posted it here.

[devnull]

@wwe
Is every Nextcloud 25 really EOL? What about Nextcloud Enterprise? Aren’t there longer support periods there?

[wwe]

I have no idea if it takes into account Enterprise versions (if it’s possible at all to detect the versions Enterprise or not from outside). My personal expectation would be it follows the Maintenance and Release Schedule · nextcloud/server Wiki · GitHub as Enterprise customers likely would not rely on the scanner at all… but fact is the scanner is frequently outdated

Security Scanner rating for unsupported NC version

Support intro

Sorry to hear you’re facing problems <a href="http://help.nextcloud.com">help.nextcloud.com</a> is for home/non-enterprise users. If you’re running a business, paid support can be accessed via <a href="http://portal.nextcloud.com">portal.nextcloud.com</a> where we can ensure your business keeps running smoothly. In order to help you as quickly as possible, before clicking Create Topic please provide as much of t…

maybe it would be better Nextcloud stops this offering as it causes lot of confusion…