Modules auto-upgrade due to security issues - wrong time of day?

Hi.

I received monitoring alarms for one of my FreePBX host having high IOWait.
This IOWait spikes alarm lasted for about 10 minutes.
During this time, the system reported loss of pings with our SIP Provider.
Indeed , the SIP TRUNK peers became lagged, then after few seconds it went unreachable.
All calls drops.
2 ip phones out of 45 became “no service” during that time.
Everything came back as normal when the IOWait alarm cleared.

I then SSH into the system to try to catch up what have use all the system resources.
Didn’t find much about the OS itself.

Found these logs entry into freepbx.log that match the time frame where IOWait where high.

[2022-May-26 09:26:28] [NOTICE] (BMO/Notifications.class.php:507) - [NOTIFICATION]-[freepbx]-[VULNERABILITIES_FIXED] - Modules vulnerable to security threats have been automatically updated (pms has been automatically upgraded to fix security issues: SEC-2022-001
tts has been automatically upgraded to fix security issues: SEC-2021-011
restapps has been automatically upgraded to fix security issues: SEC-2020-004
pms has been automatically upgraded to fix security issues: SEC-2022-001
tts has been automatically upgraded to fix security issues: SEC-2021-011
restapps has been automatically upgraded to fix security issues: SEC-2020-004
pms has been automatically upgraded to fix security issues: SEC-2022-001
tts has been automatically upgraded to fix security issues: SEC-2021-011
restapps has been automatically upgraded to fix security issues: SEC-2020-004

This Freepbx is programmed to check for modules updates every Saturdays between 04:00 and 06:00 am…

Any idea why I see theses modules being upgraded to fix security issues out of the programmed check period ?

FreePBX 14.0.16.11
12.7.6-1904-1.sng7

Thanks.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.