Trying to update some modules this morning and I get these errors:
Please wait while module actions are performed
Downloading and Installing cdr
Downloading cdr 247356 of 248069 (100%)
Error(s) downloading cdr:
File Integrity failed for /var/www/html/admin/modules/_cache/cdr-17.0.6.tgz.gpg - aborting (sha1 did not match)
Downloading and Installing directory
Downloading directory 686544 of 687199 (100%)
Error(s) downloading directory:
File Integrity failed for /var/www/html/admin/modules/_cache/directory-17.0.2.tgz.gpg - aborting (sha1 did not match)
Updating Hooks...Done
I’ve deleted the cache in /var/www/html/admin/modules/_cache but the issue persists.
Is there an issue with the mirrors ?
Thank you
3 Likes
I just got that too. While trying to update Call Recording module
More info:
I’ve tried updating another system and some module worked, but not CDR and Directory
Please wait while module actions are performed
Downloading and Installing cdr
Downloading cdr 247208 of 248069 (100%)
Error(s) downloading cdr:
File Integrity failed for /var/www/html/admin/modules/_cache/cdr-17.0.6.tgz.gpg - aborting (sha1 did not match)
Downloading and Installing directory
Downloading directory 686520 of 687199 (100%)
Error(s) downloading directory:
File Integrity failed for /var/www/html/admin/modules/_cache/directory-17.0.2.tgz.gpg - aborting (sha1 did not match)
Downloading and Installing logfiles
Downloading logfiles 81228 of 81615 (100%)
Installing logfiles
Untarring..Done
Updating tables logfile_settings, logfile_logfiles...Done
Generating CSS...Done
logfiles installed successfully
Downloading and Installing recordings
Downloading recordings 179273 of 179555 (100%)
Installing recordings
Untarring..Done
Updating tables recordings...Done
Generating CSS...Done
recordings installed successfully
Updating Hooks...Done
dcorwin822
March 3, 2026, 4:49pm
4
linuxuser@demo:/var/log$ sudo fwconsole ma updateall
No repos specified, using: [standard] from last GUI settings
Module(s) requiring upgrades: cdr, directory, logfiles, recordings
Upgrading module 'cdr' from 17.0.4.43 to 17.0.6
Downloading module 'cdr'
Processing cdr
Verifying local module download...Redownloading
Downloading...
100378/248069 [===========>----------------] 40%The following error(s) occured:
- File Integrity failed for /var/www/html/admin/modules/_cache/cdr-17.0.6.tgz.gpg - aborting (sha1 did not match)
bhotrock
March 3, 2026, 6:05pm
5
I had the same error when trying to upgrade Asterisk Logfiles, CDR Reports and Directory about 10 minutes ago. When double checking to enter the info into this reply, Asterisk Logfiles did install successfully. But CDR and Directory continue to have the “sha1 did not match” error.
Logfiles and CDR are both security updates, so I’d like to get CDR updated as soon as possible.
Edited to add: I was doing these updates through the GUI.
smit
March 3, 2026, 8:37pm
6
Same here with CDR module.
Downloading and Installing cdr Error(s) downloading cdr:
File Integrity failed for /var/www/html/admin/modules/_cache/cdr-17.0.6.tgz.gpg - aborting (sha1 did not match)
mlarosa
March 3, 2026, 9:27pm
7
Confirm the problem only with
Status
Downloading and Installing cdr
File Integrity failed for /var/www/html/admin/modules/_cache/cdr-17.0.6.tgz.gpg - aborting (sha1 did not match)
Downloading and Installing directory
File Integrity failed for /var/www/html/admin/modules/_cache/directory-17.0.2.tgz.gpg - aborting (sha1 did not match)
Downloading and Installing logfiles
File Integrity failed for /var/www/html/admin/modules/_cache/recordings-17.0.4.tgz.gpg - aborting (sha1 did not match)
Updating Hooks…Done
during installation of 17 it fails here.
File Integrity failed for /var/www/html/admin/modules/_cache/cdr-17.0.6.tgz.gpg - aborting (sha1 did not match) 2026-03-03 14:48:11 - ****** INSTALLATION FAILED ***** 2026-03-03 14:48:11 - Error at line: 1307 exiting with code 2 (last command was: fwconsole ma upgradeall >> “$log”)
Tried both iso and the git script
On-VoIP
March 3, 2026, 9:42pm
9
Same here I reached out to Sanoma they act like they have no idea what to do about it or report it too
jompie
March 3, 2026, 9:42pm
10
Had the same issue when running the install script.
2026-03-03 21:40:16 - ****** INSTALLATION FAILED *****
Then I edited the file: /tmp/sng_freepbx_debian_install.sh
Comment out line 1306 & 1307:
setCurrentStep “Upgrading FreePBX 17 modules”
then run again, using:
bash /tmp/sng_freepbx_debian_install.sh --skipversion
Then the installation will complete. After that log in the gui and update the modules there. But unfortunately also here the cdr module gets the same error.
Howdy! Welcome to the forums @smit @On-VoIP @jompie and welcome back @bhotrock @datalabsystems !
There are several security updates rolling out and unfortunately the upload to the mirror did not propagate completely. That said, the vulnerabilities all require authenticated access to the Administrator Control Panel. The issue should be resolved in the next few hours.
1 Like
Thanks for the update…..i was losing my mind over this.
On-VoIP
March 4, 2026, 1:52am
15
Do you know when the installation will work again
Should be all set now - please try again.
2 Likes
jompie
March 4, 2026, 11:29am
17
Thanks! indeed, upgraded without any issues now.
UPDATE Nevermind. Was still showing error in web gui… did CLI and it worked fine. My appologies, must be a cache issue on the web gui
Not resolved, still getting this error on Asterisk Logfiles
Downloading and Installing logfiles
File Integrity failed for /var/www/html/admin/modules/_cache/logfiles-16.0.9.tgz.gpg - aborting (sha1 did not match)
Setting of “MODULE_REPO” is (text)[http://mirror1.freepbx.org ,http://mirror2.freepbx.org ]
ccampbell
March 4, 2026, 2:57pm
19
This morning, I started receiving emails about vulnerabilities:
SECURITY NOTICE:
There are 3 modules vulnerable to security threats:
logfiles (Cur v. 17.0.3.5) should be upgraded to v. 17.0.4 to fix security
issues: GHSA-4887-4jwp-327g
cdr (Cur v. 17.0.4.43) should be upgraded to v. 17.0.6 to fix security
issues: GHSA-59gp-632h-c54v
recordings (Cur v. 17.0.2.19) should be upgraded to v. 17.0.4 to fix security issues: GHSA-9vv6-h8v6-rp4q, GHSA-f558-mp87-58vj
In a previous post, @penguinpbx had directed me to
Privilege Escalation Error in GraphQL Allows Authenticated Users to Access Additional Scopes · Advisory · FreePBX/security-reporting
For a previous vulnerability. When I tried changing the URL to match each of the GHSA IDs above, I get a 404 for each one. What can you tell us about them?
I have a script running to upgrade modules on all the PBXes right now.
Thank you,
Court
I’m having the same issue.
And the download seems to stop between 80 and 90 percent for some reason.
Which issue ? With logfiles upgrade only ?
Waiting to publish until the version numbers with the fixes are confirmed following the mirror migration issues outlined above that were causing the verification errors.
