It is critical that the Nextcloud server is maintained and kept up to date with the latest security fixes. Also, make sure the server is not publicly accessible, as this will expose it to potential attacks.

Revert to a working version VyOS - A VyOS vulnerable version was recently exploited in a powerful DDOS campaign. It is recommended that VyOS is upgraded to the latest version.
Revert to a working version CVE - It is critical that the system running the Nextcloud server is maintained and kept up to date with the latest security fixes. Also, make sure the server is not publicly accessible, as this will expose it to potential attacks.
There are several ways to revert to a working version. If the server has a fresh installation, it can be reverted to a working version as discussed in

Revert to a working version with a fresh installation

Revert to a working version VyOS - A VyOS vulnerable version was recently exploited in a powerful DDOS campaign. It is recommended that VyOS is upgraded to the latest version.
Revert to a working version CVE - It is critical that the system running the Nextcloud server is maintained and kept up to date with the latest security fixes. Also, make sure the server is not publicly accessible, as this will expose it to potential attacks.
There are several ways to revert to a working version. If the server has a fresh installation, it can be reverted to a working version as discussed in https://docs.nextcloud.com/server/12/admin_manual/revert-to-a-working-version/.

How to revert to a fresh installation

If the server has a fresh installation, it can be reverted to a working version as discussed in this article.
1. Log into your Nextcloud server and select the Backup folder on left-hand side
2. Navigate to the latest backup folder and copy the .tar.gz of your current version to an external hard drive or USB stick
3. Open a terminal (in Windows: "cmd" in search bar) and enter the following commands:
tar xvfz nextcloud-backup-version#.#.#.#.tar.gz -C /mnt/external_hard disk/backups
cd /mnt/external_hard disk/backups
rm nextcloud-backup-version#.#.#.#*

Revert to a working version using backup files

If the server has a fresh installation, it can be reverted to a working version as discussed in this article. Additionally, if the server is running an older VyOS version and it is vulnerable to CVE-2022-36074, it can be reverted back to VyOS. This article will detail how to revert back to a working VyOS.
To revert back the server to VyOS:
Uninstall VyOS completely so that there are no leftover files on the system
Revert back the system using a backup file of VyOS that was created before the update was applied

Install the latest stable version on Ubuntu 16.04, CentOS 7 and Debian 8

To install the latest stable version on Ubuntu 16.04, CentOS 7 and Debian 8, follow these instructions:

Install the latest stable version on Debian 8
# sudo apt update # sudo apt upgrade # sudo apt dist-upgrade # sudo apt autoremove # sudo apt full-upgrade # sudo service apache2 restart
Install the latest stable version on CentOS 7
# yum update -y && yum install centos-release-scl -y && sed -i "s/centos.*release\.*scl/centos.*release\/scl/g" /etc/yum.conf
Install the latest stable version on Ubuntu 16.04 LTS
# dpkg --add-architecture i386 && dpkg --add-architecture amd64 && apt update

Revert to a snapshot

If the server has an older installation, it can be reverted to a snapshot.

Timeline

Published on: 09/15/2022 22:15:00 UTC
Last modified on: 09/19/2022 19:12:00 UTC

References