Debian 9 instances upgraded to v16 without auto updates ticked

[NZvoip]

Hi All,

I had something similar happen a few months ago with Debian 9 updates being automatically rolled out on 5 PBX running debian 9 that didn't have auto updates enabled and yet other instances that do have auto update enabled were unchanged.

I didn't get very far with support and ended up busy on other issues/projects but this I need to give it more attention.

The same 5 debian instances that did linux updates last time were upgraded to v16 overnight much to my dismay. I confirmed on all 5 affected systems that auto update is not ticked. Other updates such as SIP trunks and 3CX App are available to be installed but haven't been automatically done. Other debian PBX's that do have auto update ticked haven't upgraded as yet. What made this worse is that several of the sites use grandstream phone and after the template/provisioning update with v16 the PC port was disabled and wreaked havoc until we were able to diagnose it.

Has anyone else experienced this? I need to know what's going on and have confidence that updates aren't going to be deployed.

 

[JohnS_3CX]

Are they deployed via PBX Express? and if so how old is the deployment?

 

[NZvoip]

Hi,

All the deployments were done using the debian iso from the 3CX website. Some deployments are 6 months old and some are 2 months old. They are all on debian 9.

It almost seems like the checkbox for automatic updates is inverted.

 

[leonp]

My system is also deployed on Debian, does not have auto updates enabled but was automatically updated on Sunday 24th March at 3am.

 

[JohnS_3CX]

After investigating some reported cases it appears there was a 3rd party remote management solution installed on Debian by our customers (not included by 3CX) that was configured to run a system wide upgrade command on Linux.

Please check your machines to see if you had anything similar or any scheduled jobs that would issue an upgrade command since this will automatically force upgrade your PBX too, regardless of whether you enabled updates via our management console.