# Urgent security issue in NGINX/php-fpm

**URL:** <https://help.nextcloud.com/t/urgent-security-issue-in-nginx-php-fpm/62665>\
**Category:** 📰 News\
**Created:** [October 24, 2019, 2:05pm UTC](https://help.nextcloud.com/t/urgent-security-issue-in-nginx-php-fpm/62665 "2019-10-24T14:05:56Z")\
**Posts on this page:** 1\
**Showing post:** 55

<div class="post-metadata">

**Author:** ![TP75](https://help.nextcloud.com/user_avatar/help.nextcloud.com/tp75/32/12565_2.png) [@TP75](https://help.nextcloud.com/u/TP75)\
**Post date:** [October 30, 2019, 12:15am UTC](https://help.nextcloud.com/t/urgent-security-issue-in-nginx-php-fpm/62665/55 "2019-10-30T00:15:14Z")

</div>

> [@kattivius](#):
>
> Can you help me with the steps to update the PHP to the latest version running NextcloutPI?

Please be aware I have no expertise of my own with NextcloudPi, unfortunately. However, some general advice in the following.

Your system may be without the nginx server and happily away from the a.m. ‘NGINX/php-fpm’ issue. Check for your active webserver with:

```auto
sudo systemctl status apache2

```

This should show your Apache 2.4 on the job or some other info.

You may consult the below article for background information.  
[Why NextCloudPi uses Apache and not Nginx](https://ownyourbits.com/2017/06/12/why-nextcloudpi-uses-apache-and-not-nginx/)

Consult the NCP docs on the project website and the NCP release section at GitHub:

- [NextCloudPi Documentation](https://docs.nextcloudpi.com/)
- [Release v1.18.0 seems to be current stable](https://github.com/nextcloud/nextcloudpi/releases)

There is an article as of August 2019 available giving some overview and specific advice on NCP updates on:

- [NextCloudPi gets RPi4 support, a backup UI, moves to NC16.0.3, Buster, PHP7.3 and more](https://ownyourbits.com/2019/08/05/nextcloudpi-gets-a-backup-ui-moves-to-nc16-0-3-buster-php7-3-and-more/)

Apparently, one should follow a three stages procedure for a more thorough NextcloudPi updates / system migration:

> In order to upgrade issue the following commands  
> `sudo ncp-update`  
> `sudo ncp-dist-upgrade`
> 
> Should the upgrade fail at some Debian package, you can issue `ncp-dist-upgrade` again after fixing it to complete the process.

Your goal should be a PHP 7.3 install. Apparently, the NCP update procedure should ensure for everything in the right place.

However, please be aware to **avoid** the _apt update_ command usual to other Linux flavours as NCP provides the a.m. special commands `ncp-update` and `ncp-dist-upgrade` specifically. Mixing NCP packages with standard packages would bring you some hassle and would destroy the good efforts of the NCP project on your install, I presume.

Furtherly, you may consult the [NC 16 php.ini configuration notes](https://docs.nextcloud.com/server/16/admin_manual/installation/source_installation.html#php-ini-configuration-notes) in the Nextcloud docs.

Please be aware you currently are in the ‘news’ category. There may be some better place to ask for help on your issues in this NC forum available at:

- [Installation](https://help.nextcloud.com/c/installation)
- [HowTo & FAQs](https://help.nextcloud.com/c/How-to-FAQs)

Hope this helps.  
😄

BTW a little ACK to my comment (i.e. click on the heart icon ❤) would show you are satisfied. This could be a kind gesture and would motivate me like authors of other advice to continue in seeking to help…  
😃

---

_[View the full topic](https://help.nextcloud.com/t/urgent-security-issue-in-nginx-php-fpm/62665)._