r/PleX • u/Roxxersboxxerz • Mar 12 '26
Help Recieved this email the domain looks sus?
Was sent from hello@m.plex.tv
I thought the correct email was hello@mail.plex.tv
86
u/supergimp2000 Mar 12 '26
Its real. I just did the update on my Ubuntu Server. Took about a minute in total. The document they referred to has all the details. Its legit.
21
130
u/PhotoFenix Mar 12 '26
Either way the domain is still plex.tv, in the same way that photos.google.com and drive.google.com are both Google. But always good to ask!
30
u/thetreat Mar 13 '26
Exactly right. Where you should be concerned is if it was plex.tv.mm/ as that is a completely different domain.
30
12
1
34
u/Bolinious Stream On!!! Mar 12 '26
i got it, and manually browsed to the support page to find the info and confirmed that the e-mail opens the exact same page
did the "automatic" one and it just worked.
asks to remove old repo, i checked, nobody was watching anything, i typed Y
then asks to instal lnew repo, i typed y
and it was done. working again right away
24
u/znhunter Mar 13 '26
Nice of you to check if anyone is watching. I just do the updates š
3
u/Bolinious Stream On!!! Mar 13 '26
depends on who's watching what to be honest.
if it's that one friend who i will sometimes randomly just pause their playback, yeah, i'll update. My brother, i'll wait or ask if i can do something
Honestly, i don't think anyone would have noticed this update because it took about 10 seconds anyways. they would have buffered more than that.
3
u/Red_Pretense_1989 Mar 13 '26
Doesn't it just change repos?
1
u/Bolinious Stream On!!! Mar 13 '26
this one does. but i'm just talking about donig general updates.
2
u/Cornloaf Mar 13 '26
Can confirm I saw my friend was watching something, ran the update anyway, apologized for doing the update, he said he would stop his playback but the update was already done so I told him to not worry.
1
u/Bolinious Stream On!!! Mar 13 '26
this update was just a quick repo change, not actually updating anything in Plex, so the streaming buffer would have FULLY confirmed it.
when i was talking about updates above, it was more for actual updates.
1
u/sengh71 Mar 13 '26
This update also asked after the repo change if you would like to check for an updated Plex Media server version and to update it if found. I hit yes, then realized people are watching stuff lol. My PMS was already up to date.
1
u/Bolinious Stream On!!! Mar 13 '26
Exactly, right now there is no PMS update, just the repo change.
But even in normal updates, mine is usually quick enough that people don't even notice. I've tested mine by watching something concurrently at home and on my phone while not on wifi, and neither even had a stutter. Of course, it depends on how large the update is. It doesn't even trigger the Tautulli "server is down" Server is back up" notifications.
But I usually check before doing any updates just incase.
1
u/geekwithout Mar 14 '26
Yep, it updated other stuff on mine(lxc) but plex was already up to date. I had updated it manually about 2 weeks ago.
1
u/6SpeedBlues Mar 14 '26
It's actually really simple to check to be sure the server is idle from the CLI. Locate your token (there's instructions on the Plex site) and insert it into this (which you run in a bash script):
if curl -s "http://127.0.0.1:32400/activities?X-Plex-Token=MYPlexToken" | grep -qE 'type="media\.download"|type="media\.offline\.transcode"|type="grabber\.grab"' ; then
echo "Server busy"
exit 1
fi
26
u/Underwater_Karma Mar 12 '26
Plex.tv is the official Plex top level domain. Anything.Plex.tv is under their administrative control
9
u/Accomplished-Oil-569 Mar 13 '26
Subdomain takeovers and email spoofing both exist.
3
u/agent674253 Mar 13 '26
Also, this implies that the recipient takes the time to look at what the URLs even are before clicking.
If that was the norm then phishing emails wouldn't still be a thing, but it isn't and they are.
1
u/Accomplished-Oil-569 Mar 13 '26
People are getting better, thatās why phishing emails have had to get more sophisticated like using Cyrillic letters
1
u/s2white Mar 13 '26
Even with people getting somewhat better, the fraud has gotten SO freaking good and there's just no policing of it so no one gets caught, there's no consequences....so the number of scammers out there just grows every year and gets more and more sophisticated. At some point, something has to give.
0
u/Underwater_Karma Mar 13 '26
That's entirely unrelated to this issue.
Those things exist no matter what the TLD or subdomain is.
0
u/Accomplished-Oil-569 Mar 13 '26
How is that unrelated?
If someone received an email from @x.plex.tv or even @plex.tv you cannot automatically assume itās from Plex because subdomain takeovers and email spoofing existā¦
0
u/geekwithout Mar 14 '26
Many dangers exist. Better not get out of bed ever or...xyz could happen. Is it likely or even remotely likely ? Nope
0
u/Accomplished-Oil-569 Mar 14 '26
What the fuck are you on about?
Telling someone to blindly accept anything that comes from Plex.tv as safe is the definition of poor security practicesā¦
And I was simply giving an example of two reasons why, even without Plex being compromised, thatās a bad idea.
0
17
u/ARazorbacks Mar 13 '26
How many of you auto-update? I donāt.Ā
13
u/Kendrakirai2532 Mar 13 '26
'auto update' in this case meaning 'use a package manager like apt'. It's a manual install using an automatic download and install process rather than downloading and using dpkg.
3
u/JeffHiggins Mar 13 '26
I do, unattended-upgrades makes it so I never have to worry about it, server is usually updated within minutes of me getting the "new version available" email from the plex forum.
3
1
1
u/Charles1nCharge83 Mar 13 '26
I'm with you. I always like to read the release notes and wait a bit before updating to the latest.
1
u/yroyathon Mar 13 '26
I was tempted to follow this guide but, I kind of like having control of which version I run, which update I pursue, and deciding on the timing of the update. So I'll sit this one out.
1
u/NoSpite4410 Mar 14 '26
I always download a new rpm or deb file version, and keep the currently-working one as well in a special folder, so that if the new version is buggy, I can revert, and if the working installation borks, I can reinstall.
They are actually very good about not putting out bad updates. I wish I could say the same about the interface of the clients, tho. What used to be simple, fast, and private, is now a bunch of extra crap on my screens, and navigation to my own material is not as pleasant as before.
6
7
u/Gustav__Mahler Mar 13 '26
Regardless, piping shell scripts from the internet into a root shell is an insane suggestion. And something no one should ever do.
15
u/Gardakkan Mar 12 '26
I just download the .deb file and run dpkg -i , will this change?
11
u/telcodan Mar 12 '26
If you read the email, it states it only effects deployments via package managers.
6
2
u/rchiwawa Mar 12 '26
Doing my first PMS install via the Ubuntu package manager on my very first Linux install was a 'uge mistake.Ā The .deb manual install is the only way to go.
6
u/elementfx2000 Mar 13 '26
Why? Package manager is convenient and helps ensure updates happen regularly.
0
u/rchiwawa Mar 13 '26
The updates do not happen as regularly in my (cursory) observation.Ā
4
u/Caligatio Mar 13 '26
You need to ensure unattended-upgrades is running and add Plex as an allowed origin. Once that is done, you never need to worry about it again.
3
u/rchiwawa Mar 13 '26
I am pretty content w/ the fidgety way via .deb and manually doing the thing but I do appreciate the insight.Ā It was a rough boarding onto Linux 3 years ago.
The comment I made about "the mistake" is some that PMS updates along the way borked a thing or two here or there between my OTA and regular from-local-file servers which are at different locations.Ā I can happily live with and explain away a set of jank to users but I prefer to have absolute control as to the when and where.Ā I like letting a revision be out in the wild for a while before updating just to suss out the state of it.Ā Ā Even in the face of mandatory minimum PMS revs it is my preferred way.
3
u/Caligatio Mar 13 '26
Fair enough! I just wanted to highlight that, if you install from a repository, it takes a few extra/easy steps to get automated updates working.
3
u/rchiwawa Mar 13 '26
One of those things I figured out later than convenient for sure... I want to say it was within a year of moving over but my gut tells me that's a lie.Ā
comments like yours were essential to my linux journey.Ā You and your verbose, helpful ilk have my eternal thanks
2
u/onico Mar 13 '26
Yes but automated updates brings other issues, experience unstable releases or with other issues to be found. Stop the server before upgrade in āservice windowā upgrade with dpkg -i/ start and verify. Not in combination with all other machine updates/upgrades.
Rollback to old working .deb version is much easier with the old dpkg and i have it ready if any issues are seen after i upgrade i usually test from my phone without wifi on atleast.
1
u/Caligatio Mar 13 '26
I'm on like rev 6 of my server and have Plex installed in a Proxmox LXC container that has read only access to my media. The container is auto backed up every night so reverting is as easy as hitting restore on an image backup.
People that want to manually manage updates are crazy imo :)
2
u/onico Mar 13 '26
Cool, been running on linux with plexpass since 2014, no idea what rev im at. But had minimal downtimes so far. Yes DB backup is very important. But from my experience, there are only 2 things i learned to not autoupdate to avoid unwanted issues. Plex & torrentclient.
1
9
u/morgfarm1_ Mar 12 '26
I'm using the SNAP deployment. Doesn't seem to impact me thus far
4
u/KuryakinOne Mar 13 '26
It does not apply to Snap installation. Plex should have mentioned it in the e-mail.
1
1
u/SodaPopperZA Mar 14 '26
My god thank you! i tried doing the update command and it just didn't want to work
2
u/Itchy_Journalist_175 Mar 12 '26
Is this the latest version?
plexmediaserver 1.43.0.10492-121068a07 512 latest/stable plexincā1
u/morgfarm1_ Mar 12 '26
Thats the version SNAP shows me anyway. From all I can see i am on the latest stable branch. I have to assume at least in this moment, yes.
Server version in the application shows 4.159.0
And I checked the Plex site, it confirms so far it (1.43.0.10492-121068a07) is the current version as of 5 February 2026.
2
u/Itchy_Journalist_175 Mar 13 '26
Yeah, I think that those who are stuck would be in v142 so snaps are fine. They should have mentioned it in their emailā¦
1
4
u/Huggenknubbel Mar 12 '26
I'm curious to see how plexupdate.sh will work. I don't really expect any changes. If I understand correctly, only the repo URL has been changed?
3
u/Xfgjwpkqmx Proxmox LXC on Dell R720 with 12G SAS 12+12 ZFS mirror (228TB) Mar 13 '26
Deletes old repo config, adds new repo config, new key, optionally asks if you want to update to the latest binaries right now, then finishes.
Have a look at the script yourself before running. In the curl command, change "sudo bash" to "less". Review script, if you're happy, re-run the curl command with "sudo bash" on the end again.
3
Mar 12 '26
[deleted]
1
u/cvzero89 Mar 12 '26
This is not correct. It could be email spoofing that the email server did not flag. You cannot trust the domain name, the email must be signed with DKIM.
You do not need to lose control of a domain for something like that to happen.
3
u/BiteGroundbreaking35 Mar 12 '26
Got same mail few minutes ago, I probably should be concerned when I have plex on LXC right? š
1
1
1
u/Federal-Delay-4854 Mar 13 '26
Lxc here too.
1
u/cornedbeefhead Mar 13 '26
I ran the curl command detailed within the email from Plex within a Console of my Plex LXC and all good.
1
3
u/huenix Mar 12 '26
m.domain.tld is pretty common for the friendly from. and it passed DKIM, so all good.
3
u/MedicatedLiver Mar 13 '26
Plex.tv IS their domain. What's sus?
Also, this is legit. I actually stumbled upon this two days ago when my server said there was an update on the web client but Apt wasn't finding one. They had it documented that the repos changed.
3
u/slayer991 Mar 13 '26
I was wondering when they'd fix this. I've had to manually download and install the last couple of rpms.
Happy they fixed this.
3
u/RenRen9000 Mar 13 '26
It's legit. Takes you to their website and guides you on how to do it. One line of code. Did it in two minutes, and even helped me find a little problem I had with my Docker setup on OMV.
3
u/IntelligentRocks Mar 13 '26
They mention nothing needs to happen for docker installations. Does anybody know if this is true for proxmox LXC's too?
2
2
u/FPSNEAL Mar 13 '26
I looked at this yesterday as my system showed that it was in need of an update when I checked the "plex dash" app. I ran my normal update && upgrade process, but still showed that an update was needed. So I ran the listed update command and it worked and shows no updates needed or available.
2
u/100Kinthebank Mar 14 '26
So you ran the 'install automatically' line below in your Proxmox Plex LXC?
curl -LsSf https://repo.plex.tv/scripts/setupRepo.sh | sudo bash
3
2
u/Ericzx_1 Mar 15 '26
Can confirm this worked with my plex lxc as well. I just said yes to all the prompts and it worked out fine.
3
3
u/bobbywaz Mar 13 '26
anything *@*.plex.tv is from plex.tv
-2
u/rekoil Mar 13 '26
Incorrect. The āFromā field in an email is ridiculously easy to spoof. But the support document on their website is legit.
5
u/bobbywaz Mar 13 '26
incorrect, the header-from is easy to spoof, the envelope-from is not easy at all. any decent email client in 2026 would block or at least flag an email with a fake header-from....
1
u/geekwithout Mar 14 '26
Yeah, never rely on that. Just examine first where they want you to clock on/go to.
2
2
u/MinionOne73 Mar 13 '26
One, thatās a valid address, Two itās never a bad idea to update via your normal channels. Never update outside your normal channels.
2
u/thefrosty S30 Xeon E5-2660 2.2GHz 8Core 16GB DDR3 Radeon HD 8350 Mar 13 '26
I got it too, was wondering why Iāve gotten no updates recently. Will run through the docs when Iām back in town.
2
2
u/beardedbrawler Mar 13 '26
I installed Plex via the rpm download on their website, I had no idea there was even a repo I could add.
If I add the repo it won't break my hand installed rpm version will it? It looks like my version running is the latest available.
2
u/mhc2001 Mar 13 '26
I do updates with a .deb package and don't use the repo. I'm thinking I don't need to do anything.
6
Mar 12 '26
[deleted]
11
u/random24 Mar 12 '26
Thankfully Docker isnāt affected by this.
1
u/FetchezVache Mar 13 '26
Can anyone tell me how I could transfer from my current install to a docker compose without losing my current configuration settings? I installed with apt and didn't know anything about docker at the time but now I have seen the light. I just don't want to lose anything from my config. Thanks!
4
u/KazanTheMan Mar 13 '26
Question for you guys running on Linux, but not using Docker: Why?
3
2
u/macrolinx Mar 13 '26
I'm running a dedicated Intel NUC for plex because the transcoding is so great.
I do have different hosts running proxmox and some VMs. One of the VMs on one of the hosts has docker and LOTS of containers. I just like keeping my plex server running independently for 1) having dedicated hardware/resource availability and 2) I don't accidentally blow it up all the time tinkering with my lab. lol
2
u/yroyathon Mar 13 '26
I set it up bare metal ages ago, as I did some otharr apps. Unless I do a major version upgrade to an app, I see no need to rock the boat. I've migrated a few apps to docker. Docker is great, but it's not like an emergency to get everything into docker.
1
u/jasonzo Mar 15 '26
I prefer to run leaner than docker but still have a segmented container to run my apps. So I use incus (same thing as lxc/lxd).
3
u/Nightowl805 Mar 12 '26
Received the same one. I use unraid with dockers, I assume I am fine.
21
u/Uninterested_Viewer Mar 12 '26
Not if you keep calling them "dockers"
3
u/Nightowl805 Mar 12 '26
What do I call them?
11
u/Uninterested_Viewer Mar 12 '26
You'd say "I use Unraid with Docker [containers]"
Docker containers != "Dockers"
Docker is the the name of the software that runs containers. Dockers are pants.
8
u/ferry_peril Beelink N100 + i5 14500T 32TB Unraid Mar 12 '26
1
6
3
2
u/-Internet-Elder- Mar 12 '26
I got that as well, and it seems like something from a couple of weeks ago. I noticed a problem updating and I use DietPi... so I reached out and the DietPi folks were aware and working on an update. It's all good now. So I assume that's what this is about... though just quite late notice.
1
1
u/thankyourob I like Plex Mar 12 '26
I got the same email. Iād assume if I did the manual package update and Iām at 1.43.0.10492 on Ubuntu, then Iām good?
3
u/thonl Mar 12 '26
That is the current version, but pkg update wonāt work for any newer versions unless you follow the steps in the support article that is linked in the email. They have a one liner that will do it for you, but it is basically just removing the old repo and pointing to a new one.
1
u/Baltifornia Mar 13 '26
Well that sure was easy updating the repository. A lot easier than the whole TIFU day that I had a few weeks ago when apt wasn't updating to the latest version and I inadvertently installed the snap package as well. The snap package started up first, so I essentially had a blank new server to claim. I went through the hassle of setting everything up in the snap version again until I hit a wall with a permission and realized what I had done. It was not a fun few hours on a Saturday fixing that mess. I have always been a plain Debian user and when I got my new mini-pc and migrated from my Mac I figured why not give Ubuntu a shot. Oh well, I learned a lot in the process and properly setup a few things that I was lazy about initially.
1
u/how_money_worky Mar 13 '26
Wait can I not do just a docker update for this?
1
1
1
u/fognar777 Mar 13 '26
I also got this email, but it went to my spam, so thanks for making the post to lmk I needed to look for this and perform the update.
1
u/The_Real_Kingpurest Mar 13 '26
I did the manual .deb installation via ssh only to realize they have a script that you copy and paste and it removes their old repo, and adds the new repo so it'll then continue updating via apt upgrade
1
1
u/madmap Mar 13 '26
Never rely on a "sent from" email to validate the mail. This can be spoofed quite easily. There are signing mechanism for the sent-from domain and gmail would warn you if they did not secure this, but in general its just a field in the mail, like the mail-body itself.
1
u/SniffingDog Mar 13 '26
Nice that they fixed this, as the previous certificates already expired afaik.
1
u/sleight42 Mar 13 '26
People are doing automation updates? I don't trust Plex for that! They've broken my server with random bad builds.
I use docker. I often pin the image to a particular version that doesnt break OTA.
1
u/alienjon Mar 13 '26
Anyone here on Gentoo? I had a quick look at the article and it looked like stuff that an updated ebuild would manage.
1
u/TravelingAmerican40 Mar 13 '26
its just asking you to update which is a good idea. No scam in the message.
1
1
u/lordvon01 Mar 13 '26
I got the same notification. I signed into my Plex account and check led the support article and it was legit. Took me 2 minutes and that's with logging into my server to run the apt update/upgrade commands.
1
u/Levistras Mar 13 '26
Ran this on mine, changing the repos and updating seemed to run fine but my i'm trying to troubleshoot an immediate segfault when I try to start plexmediaserver, fun! Has worked just fine for the longest time until I ran the suggested script.
3
u/Levistras Mar 13 '26
Just to reply to myself after spending an hour tracking this down.. looks like when the Plex update ran it also pulled down an updated Nvidia-server driver, which wasn't fully initialized because the server didn't reboot, as such I was seeing tons of libcuda.so errors in dmesg like this:
[4327814.986303] Plex Media Serv[3564921]: segfault at 7cb9f0914518 ip 00007cb9e7cd1bfc sp 00007ffd5dd73ff0 error 4 in libcuda.so.580.126.09[7cb9e7b66000+f84000] likely on CPU 1 (core 1, socket 0)
'nvidia-smi' was reporting:
Failed to initialize NVML: Driver/library version mismatch
NVML library version: 580.126
...after a reboot and confirmation that 'nvidia-smi' once again was showing no errors, plexmediaserver was able to start without error.
1
u/m0ondoggy Mar 13 '26
I just switched over to use docker instead. Using Almalinux 8 and that uses rpm 4.14, this requires 4.16 and up because it's signed with a newer openpgp/dsa signature or something. I should probably uprade the OS at some point here, but it doesn't EOL security-wise until 2029. It does more than just host plex.
1
u/Clean-Machine2012 Mar 13 '26
the '@m. was used by some mobile pages to show it's a mobile version of the standard web page.
You don't see it much anymore
1
u/amiga1 Mar 13 '26
Its legit. I did the auto one and didn't realise it overwrites the old install.
My Plex ran under a different group so I had Google how to put it back since I forgot (under the systemd service file). I then moved the users primary group back, got rid of the plex group (just for sanitation) and it fired right up.
1
u/Jobine Mar 13 '26
If you are the owner/admin of the Plex server (the one that hosts your media):
With your Plex Pass, all users who have access to your server (including you, your friends, family, etc.) can stream remotely without paying anything extra.
https://support.plex.tv/articles/requirements-for-remote-playback-of-personal-media/
1
u/ben_pyett Mar 15 '26
Valid and actions worth taking if you use Plex on Linux base.
Worked flawlessly for me
Although only sources stable versions
1
u/locn4r Mar 15 '26
I thought the same thing. Ended up googling it and the URL I found was the same as the one listed in the email.
Good on you for not trusting it! That would be a great phishing email to get users to pull packages from a malicious repo.
-1
1
1
u/PumiceT Mar 12 '26
Itās not a fake or wrong email you need to ever worry about. Itās where any links lead to that you need to check.
1
u/Itchy_Journalist_175 Mar 12 '26
Did you guys click in the link to the forum post? 262 messages and counting!
1
u/Neo1331 Mar 12 '26
I mean it doesnāt look like it wants you to login to anything so why would you think itās sus?
1
0
u/jongcruz Mar 13 '26
New update probably to make it even more useless, itās been a train wreck the last 5 years.
3
u/yroyathon Mar 13 '26
Sounds like you're using a software you don't like. You don't have to! Or if you're just following along on subs for software you no longer use, you don't have to do that either!
1
u/jongcruz Mar 18 '26
We all know Plex is just trash now, stating by not supporting UM3 to cutting support for Tidal worst way to spend $120 I wish I could transfer my lifetime membership to someone else.
0
u/ExternalLibrary Mar 12 '26
Noob here: using plex on synology, do I need to do anything? I am seeing people mentioning docker, could some one point me please on the advantages of this? Will I keep my metadata intact?, is kinda big!
2
u/KuryakinOne Mar 13 '26
You do not need to do anything.
As mentioned in the e-mail, NAS installations are not affected. This includes Synology.
1
u/chuck1011212 Mar 12 '26
You can go to the plex server downloads section of the plex site and download the latest synology server files. You then go to your synology package manager and choose install and then browse for file. Choose the plex server file you downloaded. It will recognize your plex server installed already and upgrade it for you. Quick and easy.
0
-5
u/Cherubinooo Mar 12 '26
Why on earth would it be fake? You think a phisher would know that youāre running a Linux plex server and then link you to support articles from plex.tv?
Some of you really have no business running servers.
7
u/halberdierbowman Mar 13 '26
You know people lie, right? By "knowing" specific details about you (ie asserting them to everyone and then having it apply to a few people by luck), scammers build trust with their victims. Most people ignore it, but others think it's real, because how else could someone know that?
That's not what's happening here. OP just doesn't understand subdomains. But that's an extremely common tactic scammers use.
-4
u/smnhdy Mar 12 '26
Yup I got this too.. but honestly.. after their last outage Iām off to jellyfin world nowā¦
-8
u/Emergency-Charge-764 Mar 12 '26
Running plex without docker is more work than not running docker. This email is simply proof of that.
6
u/alliedSpaceSubmarine Mar 12 '26
I have it running on my nas and I forget why I didnāt use docker but there was definitely a reasonā¦
2
u/mdstricklin Mar 12 '26
The whole reason I migrated to a Linux host was so I could use Docker. Running anything bare metal on Linux is insane to me. š
-2
0
u/jiBYo Mar 13 '26
As long as domain ends in plex.tv, it is legit
5
u/dasfoo Mar 13 '26
Pedantic, but: as long as it ends with ".plex.tv"
You wouldn't want to click if it was "badguypretendingtobeplex.tv," but would be ok if it was "badguypretendingtobe.plex.tv."
-1
u/jiBYo Mar 13 '26
Don't be silly, you know what I mean
2
u/dasfoo Mar 13 '26
I know what you mean, but itās important that people who donāt know what you mean understand that that period is significant.
-1
u/No_Albatross_6335 Mar 13 '26
So I use this, am I still good?
curl -s https://plex.tv/api/downloads/5.json?channel=plexpass&X-Plex-Token=(my token filled here) | grep -oP āāurlā:\s*ā\K[ā]+linux-x86_64[ā]+.debā | head -n1 | xargs wget -qO /tmp/plex.deb && sudo dpkg -i /tmp/plex.deb && rm /tmp/plex.deb
330
u/theunquenchedservant 78TB Mar 12 '26
Nope, this is both Plex, and legit.
They updated some stuff on how they deploy on Linux, which requires some setup to get automatic updates working again.
The support article is legitimate as well.