What is the best way of getting notified of new updates that resolve CVEs?

[JAA IT Dept]

Is there a security mailing list or anything?

Thanks

 

[Charles_3CX]

You can check our security updates in the Security change log and subscribe to the blog for news and updates.

 

[aholmes-think]

Not that you've asked, but our platform pushes or can push linux updates behind the scenes if you are self-hosted.

 

[JAA IT Dept]

Not that you've asked, but our platform pushes or can push linux updates behind the scenes if you are self-hosted.

Thanks, yes we do auto update daily.

 

[aholmes-think]

Thanks, yes we do auto update daily.

Here's where they are listed if you are just looking for listing: https://nvd.nist.gov/vuln/detail/cve-2026-98432

This is the most recent i've seen.

 

[KyriacosS_3CX]

Update 10 is introducing an OS level update notification channel, so these will appear as pending updates in the PBX itself as soon as we publish them.

 

[Gasha]

Hello fellas,

auto-update is set daily for our machines as well.
They should have been completed about an hour ago, we are running Update 9 still, we compared both "pre" and "post" update package lists and version and have noticed no difference whatsoever.

The auto-update window was 10-11 am and according to the logs no update has been commited yet.
Can anyone tell us what's going on?

Thank you kindly.

 

[TheodorosG_3CX]

Security updates will apply between 2:00AM - 3:00AM server time when automatic updates is enabled.

 

[Gasha]

Security updates will apply between 2:00AM - 3:00AM server time when automatic updates is enabled.

Appreciate the quick response.

So that means we'll have to wait a bit longer until the tomorrow early EU time then?
We will check early in the morning then!