# Security Update: VitalPBX 3.2.1 is now available!

**URL:** <https://forums.vitalpbx.org/t/security-update-vitalpbx-3-2-1-is-now-available/1291>\
**Category:** Announcement\
**Created:** [May 4, 2022, 6:50pm UTC](https://forums.vitalpbx.org/t/security-update-vitalpbx-3-2-1-is-now-available/1291 "2022-05-04T18:50:00Z")\
**Posts on this page:** 17\
**Page:** 1

<div class="post-metadata">

**Author:** ![miguel](https://forums.vitalpbx.org/user_avatar/forums.vitalpbx.org/miguel/32/415_2.png) [@miguel](https://forums.vitalpbx.org/u/miguel)\
**Post date:** [May 4, 2022, 6:50pm UTC](https://forums.vitalpbx.org/t/security-update-vitalpbx-3-2-1-is-now-available/1291/1 "2022-05-04T18:50:00Z")

</div>

The VitalPBX version 3.2.1 R1 is now available. This new version includes significant security patches along with regular fixes and enhancements.

To provide some context, we got notified that the backup files could be retrieved in the previous versions using a browser and a brute force script. Hence, this version implements security enhancements to protect the backup files. Fortunately, the incident was kept under wraps, and no users have been affected by the problem. Thereby, we recommend updating your PBX as soon as you can.

[Full Changelog Here](https://vitalpbx.com/vitalpbx-phone-system-change-log/)

---

<div class="post-metadata">

**Author:** ![csweeney05](https://forums.vitalpbx.org/letter_avatar_proxy/v4/letter/c/50afbb/32.png) [@csweeney05](https://forums.vitalpbx.org/u/csweeney05)\
**Post date:** [May 7, 2022, 3:17am UTC](https://forums.vitalpbx.org/t/security-update-vitalpbx-3-2-1-is-now-available/1291/3 "2022-05-07T03:17:44Z")

</div>

I ran the update tonight but by Asterisk version is still 18.6.0, I thought the update should bring it to 18.10 ?

System Information

| Distro | CentOS Linux release 7.8.2003 (Core) |
| --- | --- |
| Kernel | 3.10.0-1127.19.1.el7.x86\_64 |
| Asterisk | 18.6.0 |
| Clear Voice One | 3.2.1-1 |

---

<div class="post-metadata">

**Author:** ![mo10](https://forums.vitalpbx.org/letter_avatar_proxy/v4/letter/m/58f4c7/32.png) [@mo10](https://forums.vitalpbx.org/u/mo10)\
**Post date:** [May 7, 2022, 12:30pm UTC](https://forums.vitalpbx.org/t/security-update-vitalpbx-3-2-1-is-now-available/1291/4 "2022-05-07T12:30:27Z")

</div>

Try as root via ssh:

```auto
yum update

```

And you are still on CentOS 7.8.  
Guess you never did yum update.  
Will take a while.

---

<div class="post-metadata">

**Author:** ![mo10](https://forums.vitalpbx.org/letter_avatar_proxy/v4/letter/m/58f4c7/32.png) [@mo10](https://forums.vitalpbx.org/u/mo10)\
**Post date:** [May 7, 2022, 12:34pm UTC](https://forums.vitalpbx.org/t/security-update-vitalpbx-3-2-1-is-now-available/1291/5 "2022-05-07T12:34:14Z")

</div>

@miguel

Thanks.

1. 

12 Extensions limit on community without addon is now active?

1. 

“The public path utilized in the previous versions is still available, but we expect to remove it in future versions.”

Can you please make this optional? Since with use that onpremise.  
Or will regular http auth will be available? [Http://admin:admin@IPofPBX.com](Http://admin:admin@IPofPBX.com)

---

<div class="post-metadata">

**Author:** ![PitzKey](https://forums.vitalpbx.org/user_avatar/forums.vitalpbx.org/pitzkey/32/420_2.png) [@PitzKey](https://forums.vitalpbx.org/u/PitzKey)\
**Post date:** [May 8, 2022, 8:18am UTC](https://forums.vitalpbx.org/t/security-update-vitalpbx-3-2-1-is-now-available/1291/6 "2022-05-08T08:18:28Z")

</div>

> [@mo10](#):
>
> 12 Extensions limit on community without addon is now active?

Where do you see that?

---

<div class="post-metadata">

**Author:** ![mo10](https://forums.vitalpbx.org/letter_avatar_proxy/v4/letter/m/58f4c7/32.png) [@mo10](https://forums.vitalpbx.org/u/mo10)\
**Post date:** [May 8, 2022, 8:51am UTC](https://forums.vitalpbx.org/t/security-update-vitalpbx-3-2-1-is-now-available/1291/7 "2022-05-08T08:51:01Z")

</div>

> [@PitzKey](#):
>
> Where do you see that?

Was just asking.  
Because it says so on the new Website:

> **[VitalPBX - Advanced PBX System](https://vitalpbx.com)**
>
> VitalPBX is an advanced PBX system that can be installed on physical hardware on site or as a hosted application.

---

<div class="post-metadata">

**Author:** ![PitzKey](https://forums.vitalpbx.org/user_avatar/forums.vitalpbx.org/pitzkey/32/420_2.png) [@PitzKey](https://forums.vitalpbx.org/u/PitzKey)\
**Post date:** [May 8, 2022, 10:29am UTC](https://forums.vitalpbx.org/t/security-update-vitalpbx-3-2-1-is-now-available/1291/8 "2022-05-08T10:29:55Z")

</div>

Hmm… Does that mean that when updating you’ll lose all extensions exceeding the limit?

---

<div class="post-metadata">

**Author:** ![jppedrosa](https://forums.vitalpbx.org/letter_avatar_proxy/v4/letter/j/f0a364/32.png) [@jppedrosa](https://forums.vitalpbx.org/u/jppedrosa)\
**Post date:** [May 10, 2022, 12:46am UTC](https://forums.vitalpbx.org/t/security-update-vitalpbx-3-2-1-is-now-available/1291/9 "2022-05-10T00:46:24Z")

</div>

Hi,

Is it normal try to connect with all these mirrors to update to the new version and avoid the proxy that I had configured to do the update?

 ![image](https://forums.vitalpbx.org/uploads/default/original/1X/2d04905404fe69c04820e7ae39bf3d5416d92a33.png)

---

<div class="post-metadata">

**Author:** ![miguel](https://forums.vitalpbx.org/user_avatar/forums.vitalpbx.org/miguel/32/415_2.png) [@miguel](https://forums.vitalpbx.org/u/miguel)\
**Post date:** [May 10, 2022, 3:33am UTC](https://forums.vitalpbx.org/t/security-update-vitalpbx-3-2-1-is-now-available/1291/10 "2022-05-10T03:33:41Z")

</div>

> [@mo10](#):
>
> 12 Extensions limit on community without addon is now active?

This will get applied on version 4!

---

<div class="post-metadata">

**Author:** ![miguel](https://forums.vitalpbx.org/user_avatar/forums.vitalpbx.org/miguel/32/415_2.png) [@miguel](https://forums.vitalpbx.org/u/miguel)\
**Post date:** [May 10, 2022, 3:35am UTC](https://forums.vitalpbx.org/t/security-update-vitalpbx-3-2-1-is-now-available/1291/11 "2022-05-10T03:35:21Z")

</div>

> [@mo10](#):
>
> Can you please make this optional? Since with use that onpremise.  
> Or will regular http auth will be available? [Http://admin:admin@IPofPBX.com](Http://admin:admin@IPofPBX.com)

If you have full access to the server, you can create your own apache configuration to access the recordings from external applications.

---

<div class="post-metadata">

**Author:** ![jppedrosa](https://forums.vitalpbx.org/letter_avatar_proxy/v4/letter/j/f0a364/32.png) [@jppedrosa](https://forums.vitalpbx.org/u/jppedrosa)\
**Post date:** [May 10, 2022, 10:47am UTC](https://forums.vitalpbx.org/t/security-update-vitalpbx-3-2-1-is-now-available/1291/12 "2022-05-10T10:47:37Z")

</div>

It was updated without permit anything in firewall

![image](https://forums.vitalpbx.org/uploads/default/original/1X/7e593a9adadc97a0a0f3db8fb743c579c6e4c81c.png)

---

<div class="post-metadata">

**Author:** ![it-telecom](https://forums.vitalpbx.org/user_avatar/forums.vitalpbx.org/it-telecom/32/2762_2.png) [@it-telecom](https://forums.vitalpbx.org/u/it-telecom)\
**Post date:** [May 17, 2022, 5:55pm UTC](https://forums.vitalpbx.org/t/security-update-vitalpbx-3-2-1-is-now-available/1291/13 "2022-05-17T17:55:29Z")

</div>

If i buy a starter licence, am i still limited to 12 extensions ?

Thanks

---

<div class="post-metadata">

**Author:** ![mo10](https://forums.vitalpbx.org/letter_avatar_proxy/v4/letter/m/58f4c7/32.png) [@mo10](https://forums.vitalpbx.org/u/mo10)\
**Post date:** [May 17, 2022, 6:41pm UTC](https://forums.vitalpbx.org/t/security-update-vitalpbx-3-2-1-is-now-available/1291/14 "2022-05-17T18:41:28Z")

</div>

> [@it-telecom](#):
>
> If i buy a starter licence, am i still limited to 12 extensions ?

No, with any add-ons you will not have that limit.  
And as said: the limit (12) will only be applied on VitalPBX 4.0 community edition (free).

---

<div class="post-metadata">

**Author:** ![jmarcosm](https://forums.vitalpbx.org/letter_avatar_proxy/v4/letter/j/9fc348/32.png) [@jmarcosm](https://forums.vitalpbx.org/u/jmarcosm)\
**Post date:** [June 15, 2022, 7:11pm UTC](https://forums.vitalpbx.org/t/security-update-vitalpbx-3-2-1-is-now-available/1291/15 "2022-06-15T19:11:48Z")

</div>

I’m using the 3.2.2-1 version. The upgrade to the mayor version 4 will be automatic ? I mean , if I check for upgrades and the vers, 4 is available , my pbx will be upgraded to 4?

---

<div class="post-metadata">

**Author:** ![PitzKey](https://forums.vitalpbx.org/user_avatar/forums.vitalpbx.org/pitzkey/32/420_2.png) [@PitzKey](https://forums.vitalpbx.org/u/PitzKey)\
**Post date:** [June 15, 2022, 7:14pm UTC](https://forums.vitalpbx.org/t/security-update-vitalpbx-3-2-1-is-now-available/1291/16 "2022-06-15T19:14:28Z")

</div>

Version 4 runs on Debian. It won’t be a simple yum update.

---

<div class="post-metadata">

**Author:** ![icar17](https://forums.vitalpbx.org/letter_avatar_proxy/v4/letter/i/50afbb/32.png) [@icar17](https://forums.vitalpbx.org/u/icar17)\
**Post date:** [June 25, 2022, 7:12am UTC](https://forums.vitalpbx.org/t/security-update-vitalpbx-3-2-1-is-now-available/1291/17 "2022-06-25T07:12:58Z")

</div>

hello,  
“We expect to migrate to Debian in a couple of months” (sept 21).  
Can you tell us when this version will be available?  
Is there a beta test program ?

Thx

---

<div class="post-metadata">

**Author:** ![PitzKey](https://forums.vitalpbx.org/user_avatar/forums.vitalpbx.org/pitzkey/32/420_2.png) [@PitzKey](https://forums.vitalpbx.org/u/PitzKey)\
**Post date:** [June 25, 2022, 5:49pm UTC](https://forums.vitalpbx.org/t/security-update-vitalpbx-3-2-1-is-now-available/1291/18 "2022-06-25T17:49:22Z")

</div>

It was officially supposed to be released for IT Expo, which was last week.
