Important security update for 432OS and patching roadmap

To our valued 432 EVO customers:

We’re announcing the official roadmap for security updates of 432OS, our enterprise grade real-time operating system, which is now bundled with every server sold, and which is also available as a paid upgrade for older servers.

Security first

While several high-end music server brands run on outdated, End-of-Life Debian 10 or 11 platforms (making patching nearly impossible, which limits them to feature updates only, but zero security updates), 432 EVO’s modern AlmaLinux 9.X architecture delivers a robust 10-year enterprise security lifecycle (backed through 2032, with extensions planned to 2035).

The first critical update for 432OS: the PHP2Shell case study

With ~70% of internet-facing PHP sites hit by the massive PHP2Shell vulnerability, the internet was literally on fire on October 21.

Here is how 432 EVO took immediate action to protect both its customers and the site.

432 EVO’s modern AlmaLinux 9.X architecture delivers a robust 10-year enterprise security lifecycle. This architecture allowed us to provide fast patching of your 432 EVO music server against the same vulnerability that set the internet on fire, in just one day.

Here is the PDF with the step-by-step instructions for updating active 4320S music servers, and some background of what has happened in the past days, and how we resolved the situation at 432 EVO:

https://432evo.be/432OS-php2shell-protection.pdf

End of support for our legacy VortexBox-based OS fork, used on units manufactured until Summer 2024. Support for this OS has already concluded in December 2025.

This decision allows us to fully focus on our new, proprietary 432OS, which delivers a significantly improved listening experience with enhanced sound quality, stability, and performance. Maintaining the old OS has become increasingly challenging due to its age, compatibility issues across 10 different motherboard versions, and the scarcity of spare parts for older hardware.

The old OS is not being patched for PHP2Shell and is also incompatible with the latest Roon updates.

More 432 EVO customers are now on 432OS

Since 432 EVO does not physically lock the motherboard to a milled backpanel, the “EVO” in 432EVO has been field tested in 2026 since so many Roon users have already made the jump to the current hardware running on 432OS.

Your Investment is Protected with an Upgrade Path!

We believe in supporting your investment. Unlike some competitors, we’re not leaving older units behind. We’re proud to offer an exceptional upgrade service for all 432 EVO owners, dating back to 2013, and we are now setting the far in the future EOL dates, for security patching.

Important questions when buying a new or used music server:

1. Which is the actual underlying OS?

2. How long and how fast are you patching for security?

3. Do you inform your users about critical security updates?

At 432 EVO, the underlying OS is AlmaLinux 9.X with 9.8 being the version in October 2026, with patching until 2032. When the answer is Debian 10 or 11, security patches are no longer happening. In case of a critical update requiring fast action, we’ll announce it on both Facebook and the 432 EVO website.

Don’t accept the use of outdated EOL Linux as the underlying OS for that fancy server. Be vigilant, be secure.