CopyFail Kernel Vulnerability (CVE-2026-31431)

[SweetAction]

Opening this thread because I know it's coming.

https://copy.fail/ was released into the wild. I'm sure people will ask when it will be patched, so this thread is for 3CX to state when the upstream patches will be pushed into 3CX updates.

 

[SteveITS]

Unlike the PBX, SBCs should just be updated via apt.

 

[ArneDery]

Unlike the PBX, SBCs should just be updated via apt.

Thanks Steve for the reply, this is what our conclusion as well, but was looking for some extra confirmation

 

[PBX128]

Unlike the PBX, SBCs should just be updated via apt.

Wouldn't it be better if every 3CX server (SBC as well) uses auto update?

 

[Especialistas]

Security updates have been pushed to our repos so you may also confirm:
https://www.3cx.com/blog/change-log/pbx-security-updates/
View attachment 51693

Hello,

I'm using v20.0 update 8 build 1121. When I check for updates in the GUI, the only available option is "New 20.0 update 9 Alpha".

What is the recommended action to keep my system safe? Should I wait for a stable release?

Thank you so much

 

[NikosT_3CX]

@Especialistas you wil not see this on the GUI of the PBX.
You will have to ssh to your machine and check the cache policy of specific packets.
Check here our security updates that have been released :
https://www.3cx.com/blog/change-log/pbx-security-updates/

If you have on the PBX enabled the Automatic Updates, these have already been installed on the OS.

 

[Especialistas]

@Especialistas you wil not see this on the GUI of the PBX.
You will have to ssh to your machine and check the cache policy of specific packets.
Check here our security updates that have been released :
https://www.3cx.com/blog/change-log/pbx-security-updates/

If you have on the PBX enabled the Automatic Updates, these have already been installed on the OS.

Hello @NikosT_3CX

I see here linux-image-amd64 version 6.1.99-1, but the recommended is 6.1.170-3.

It's safe to upgrade manually via CLI ( apt update && apt upgrade -y ) ?

Thank you so much

 

[NikosT_3CX]

@Especialistas do you have Automatic Updates enabled on the PBXs ?
We do not recommend manual updates.

 

[Especialistas]

@Especialistas do you have Automatic Updates enabled on the PBXs ?
We do not recommend manual updates.

Not yet, but I've configured right now. I'll see today at night if the packets will be updated.

Thank you so much