Ticket #5544 (closed Bugs: invalid)

Opened 4 months ago

Last modified 4 months ago

CentOS PHP update 5.1.6-27.4 breaks voicemail download

Reported by: JamesGecko Assigned to:
Priority: minor Milestone: Undetermined
Component: ARI Version: 2.9-branch
Keywords: centos, php Cc:
Confirmation: Unreviewed SVN Revision (if applicable):
Backend Engine: Asterisk 1.8 Backend Engine Version:

Description

I'm running 64-bit AsteriskNow, installed a year ago. Here is the uname -a output:

Linux voice 2.6.18-274.3.1.el5 #1 SMP Tue Sep 6 20:13:52 EDT 2011 x86_64 x86_64 x86_64 GNU/Linux 

The PHP update CentOS deployed yesterday has broken ARI. A "404 File not found!" error is displayed when trying to download voicemail recordings.

I modified recordings/misc/audio.php a little bit. Here is the output of var_dump($_SESSION):

array(2) { ["ari_error"]=> string(0) "" ["ARI_ROOT"]=> string(9) "index.php" }

audio.php appears to be building the file path using $_SESSION['ari_user']['recfiles'], which are not present in that dump. I'm not familiar enough with ARI or PHP to figure out what is causing that.

Here are the update notes RedHat provided:

$ rpm -q --changelog php.x86_64 | less

* Thu Jan 05 2012 Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 5.1.6-27.4
- add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
  CVE-2011-1148, CVE-2011-1466, CVE-2011-1469, CVE-2011-2202 (#769756)

Not sure if this is an ARI issue or a PHP issue; I'd just like to get the voicemail interface functional again. :-)

Change History

01/26/12 15:05:47 changed by JamesGecko

Oops! The update apparently just changed ownership of /var/lib/php/session. Running

sudo chown -R asterisk /var/lib/php/session

set things back to normal.

01/26/12 16:06:43 changed by GameGamer43

  • status changed from new to closed.
  • resolution set to invalid.