Skip to content

Releases: ZoneMinder/zoneminder

My Friend Of Misery .2

04 Feb 21:51
@connortechnology connortechnology
1.34.2
b7ad7ab
Compare
Choose a tag to compare
My Friend Of Misery .2

Bug fixes since 1.34.1

  • Fix failed login using Google reCaptcha [#2820]

1.34.2 (2020-02-04)

Full Changelog

Assets 2
Loading

My Friend Of Misery .1

25 Jan 15:56
@connortechnology connortechnology
1.34.1
fb5111f
Compare
Choose a tag to compare
My Friend Of Misery .1

Bug fixes since 1.34.0

  • Return to original url after login [#2811]
  • Bug fix Montage page: Allows for proper functionality if MultiPort isn't configured [#2812]
  • zmtrigger.pl bad SQL syntax [#2814]

1.34.1 (2020-01-25)

Full Changelog

Assets 2
Loading

My Friend Of Misery

17 Jan 15:03
@connortechnology connortechnology
1.34.0
a398f33
Compare
Choose a tag to compare
My Friend Of Misery

This is largely a fixes & polish release. There are a number of bug fixes and security improvements in here.

We DO NOT RECOMMEND running any prior version of zoneminder

Upgrading from 1.32.3 should be relatively painless although if your Logs table is large it may take some time to update it.

Security fixes:

  • We no longer store passwords using mysql's built-in password encryption.
  • We now support a modern JWT access token system
  • Replaced a lot of inline javascript.
  • There were a number of XSS and SQL injection issues fixed.
  • CVE-2019-13072
  • CVE-2019-6777

Other changes:

  • When adding a new monitor a random colour will be assigned to it instead of red.
  • We now have a handy resolution dropdown to help prevent typos in the width & height fields
  • Support for mysql8
  • Support for php 7.4
  • Can now delete database log entries for the logs popup
  • Timezone setting moved from php.ini to Options -> System
  • ffmpeg hwaccel support for h264 decoding
  • Improved recording to mp4 with audio
  • Added ZM_LOG_FFMPEG options which captures ffmpeg debug messages properly which can really help with debugging.
  • Added ability to use zms to stream mjpeg when the video is stored as h265. Most browsers can't play h265 so this allows you to use passthrough mode with an h265 camera and still watch the video.
  • Filters now have a Copy To action which copies the event files to a second storage area
  • We now display additional event information such as that generated by event server object detection

To update to this release on Ubuntu, you will need to add the new ppa
sudo add-apt-repository ppa:iconnor/zoneminder-1.34

Thank You to Those who have Contributed

We continue to thank those that have contributed to the ZoneMinder project. ZoneMinder is a community project. As such, we are constantly in need of those willing to volunteer their time to maintain and improve it, whether that be writing code, answering questions in the forum, or updating our documentation. Please consider helping us.

Change Log

1.34.0 (2020-01-15)

Full Changelog

Merged pull requests:

Read more
Assets 2
Loading

And Justice for All

08 Dec 14:44
@knight-of-ni knight-of-ni
1.32.3
077c643
Compare
Choose a tag to compare
And Justice for All

Thank You to Those who have Contributed

We continue to thank those that have contributed to the ZoneMinder project. ZoneMinder is a community project. As such, we are constantly in need of those willing to volunteer their time to maintain and improve it, whether that be writing code, answering questions in the forum, or updating our documentation. Please consider helping us.

Bug Fix Release

This is another bug fix release.

Here is a summary of the changes:

  • Better support for ZoneMinder behind a (reverse) proxy
  • Fix triggers to sum event counts properly
  • fix API getVersion call
  • fix shared memory alignment errors on some 32bit systems
  • fix return user/pass credentials when auth relay is plain

What's New

If you are upgrading from a release older than 1.32.0, then it is critically important to read the release notes for the 1.32.0 release. There are several critical changes you should be aware of. Please read them. It is painfully obvious to us who has and has not read the release notes in our user forum.

Change Log

1.32.3 (2018-12-08)

Full Changelog

Merged pull requests:

* This Change Log was automatically generated by github_changelog_generator

Assets 2
Loading

Tuesday's Gone

13 Oct 18:50
@knight-of-ni knight-of-ni
1.32.2
5b93b77
Compare
Choose a tag to compare
Tuesday's Gone

Thank You to Those who have Contributed

We continue to thank those that have contributed to the ZoneMinder project. We are always in need of volunteers, not just to write code, but to help manage the user forum, manage wiki content, write documentation, test the latest master branch, etc. There is always far more work to do than people available to do the work.

Bug Fix Release

This is a bug fix release that fixes issues of moderate severity.

Here is a summary:

  • Additional fixes to zmtrigger
  • Additional fixes to zmfilter
  • remember navbar collapse selection
  • don't build neon instructions on armel architecture
  • don't refresh the page during an Ajax timeout error

What's New

If you are upgrading from a release older than 1.32.0, then you should read the release notes for that release. There are several key changes you should be aware of.

Change Log

1.32.2 (2018-10-13)

Full Changelog

Merged pull requests:

* This Change Log was automatically generated by github_changelog_generator

Assets 2
Loading

Turn the Page

02 Oct 12:31
@knight-of-ni knight-of-ni
1.32.1
5c6cf88
Compare
Choose a tag to compare
Turn the Page

Thank You to Those who have Contributed

We continue to thank those that have contributed to the ZoneMinder project. We are always in need of volunteers, not just to write code, but to help manage the user forum, manage wiki content, write documentation, test the latest master branch, etc. There is always far more work to do than people available to do the work.

Bug Fix Release

This is a bug fix release that fixes several key problems. We recommend everyone update immediately.

Here is a summary:

  • Fix zmaudit ignoring the archive flag
  • Fix issues due to the way events are stored
  • Fix zmtrigger ignoring recently changed monitors
  • Reload the page properly on ajax error (avoids "permission denied" screen)
  • Fix x264 encode method corrupting shared memory
  • Fix the export button on the log view

What's New

If you are upgrading from a release older than 1.32.0, then you should read the release notes for that release. There are several key changes you should be aware of.

Change Log

1.32.1 (2018-10-01)

Full Changelog

Merged pull requests:

* This Change Log was automatically generated by github_changelog_generator

Assets 2
Loading

Nothing Else Matters

12 Sep 13:20
@knight-of-ni knight-of-ni
1.32.0
2f7c9a4
Compare
Choose a tag to compare
Nothing Else Matters

Thank You to Those who have Contributed

We continue to thank those that have contributed to the ZoneMinder project. We are always in need of volunteers, not just to write code, but to help manage the user forum, manage wiki content, write documentation, test the latest master branch, etc. There is always far more work to do than people available to do the work.

This version of ZoneMinder includes a new look, which means our documentation is in need of being updated. The only requirement is a desire to learn a fairly intuitive markdown language. Please consider volunteering your time.

What's New

There are significant changes to this release.

Here is a brief summary:

  • A re-worked web console, compared to the previous 1.30.4 release
  • record to mp4 container
  • record audio
  • support for php 7.x
  • Arbitrary website as a non-recordable, interactive monitor.
  • Updated Montage Review
  • Options-> Paths moved into config files under conf.d folder
  • Multiple storage paths are supported. See Options -> Storage
  • The old method of bind mounting the event folder is no longer needed nor recommended
  • Additional system statistics on the web console
  • Raspberry pi OMX hardware h264 decoder support
  • Event thumbnails play video on mouseover
  • Drag and drop sorting of monitors
  • Scalability improvements
  • Support for Redhat el6 distros and clones has been removed

Existing Users

For those of you upgrading from a previous version of ZoneMinder:

  • The upgrade scripts will take longer than normal to run, especially if you have many events
  • Your previous settings on the Options -> Paths tab have been moved into the file zmcustom.conf which is typically found under /etc/zm/conf.d
  • Consider migrating your events folder from the former bind mount method to the new method under Options -> Storage
  • You should no longer have symbolic links in your webroot folder. This resolves a long standing security issue.
  • The Apache config file has changed. This config file may or may not update automatically. This depends on what distro you are running and how you installed ZoneMinder. Please refer to the documentation for your distro to learn what specific steps are required.

Attention Package Managers

There are some fairly significant changes that must be completed to your packing scripts in order for ZoneMinder to install properly. Please contact us to coordinate the changes to your packaging scripts. A brief summary of the requirements is listed here: #2078 (comment)

Change Log

1.32.0 (2018-09-12)

Full Changelog

Merged pull requests:

Read more
Assets 2
Loading

The Frayed Ends of Sanity

09 May 14:56
@knight-of-ni knight-of-ni
1.30.4
12fc011
Compare
Choose a tag to compare
The Frayed Ends of Sanity

Small Fix

This release has been created to address an issue which was discovered in the new uridecode function. There are some minor packaging related changes made as well. What follows has been copied and pasted from the previous release notes to make sure everyone reads it.

Cake PHP API Note

The previous 1.30.2 release disabled cake php debug mode due to a potential security vulnerability. Be advised that, because cake debug mode is off, the cake debug web page, typically navigated to with a /zm/api suffix, is also turned off. The API itself will continue to function normally.

Important Note to Package Maintainers

Switching to the php apc cache engine adds a new package dependency on the php-apc or php-apcu package. The exact name of the package varies per distro. The API will not function without this package installed and the web server restarted.

Nightly Builds

We have recently enabled a nightly build system, which is cranking out rpm & deb packages almost as fast as we make changes to the source code. If you have an interest in testing a recent build of the master branch then this is for you. This will allow you to test bleeding edge software changes w/o having to first be an expert in building rpm or deb packages. Nightly build rpm packages are currently available at zmrepo.zoneminder.com. As soon as I learn where Isaac is hosting the deb packages, I will update these release notes.

Thank You to Those who have Contributed

We continue to thank those that have contributed to the ZoneMinder project. We are always in need of volunteers, not just to write code, but to help manage the user forum, manage wiki content, write documentation, test the latest master branch, etc. There is always far more work to do than people available to do the work.

What follows is the complete change log since our previous release:

Change Log

1.30.4 (2017-05-09)

Full Changelog

Merged pull requests:

Assets 2
Loading

Turn the Page

02 May 18:30
@knight-of-ni knight-of-ni
1.30.3
fd8aa62
Compare
Choose a tag to compare
Turn the Page

One More bug Fix Release

The ZoneMinder team is proud to release one more bug release before we move on to bigger things.

There are not as many changes this go around, but here is a summary of the most significant:

  • The cake php cache engine has been changed from flat files to php apc. No more API failures due to missing folders.
  • A previous security vulnerability fix introduced a bug restarting zma/zmc. This has been fixed.
  • Fixed a long standing issue where the timestamp would disappear when TIMESTAMP_ON_CAPTURE was disabled.
  • Historically, zms has never supported extended ascii characters in camera passwords. This has been fixed.

Cake PHP API Note

The previous 1.30.2 release disabled cake php debug mode due to a potential security vulnerability. Be advised that, because cake debug mode is off, the cake debug web page, typically navigated to with a /zm/api suffix, is also turned off. The API itself will continue to function normally.

Important Note to Package Maintainers

Switching to the php apc cache engine adds a new package dependency on the php-apc or php-apcu package. The exact name of the package varies per distro. The API will not function without this package installed and the web server restarted.

Nightly Builds

We have recently enabled a nightly build system, which is cranking out rpm & deb packages almost as fast as we make changes to the source code. If you have an interest in testing a recent build of the master branch then this is for you. This will allow you to test bleeding edge software changes w/o having to first be an expert in building rpm or deb packages. Nightly build rpm packages are currently available at zmrepo.zoneminder.com. As soon as I learn where Isaac is hosting the deb packages, I will update these release notes.

Thank You to Those who have Contributed

We continue to thank those that have contributed to the ZoneMinder project. We are always in need of volunteers, not just to write code, but to help manage the user forum, manage wiki content, write documentation, test the latest master branch, etc. There is always far more work to do than people available to do the work.

What follows is the complete change log since our previous release:

Change Log

1.30.3 (2017-05-02)

Full Changelog

Merged pull requests:

Assets 2
Loading

The Unforgiven

30 Mar 22:45
@knight-of-ni knight-of-ni
1.30.2
a66c15f
Compare
Choose a tag to compare
The Unforgiven

Slight Change of Plans

Vulnerabilities! Yikes!
We had several reports of vulnerabilities come in during the last release candidate. We thank the security professionals for taking the time to review our project and have been hard at work implementing fixes. There are a few remaining vulnerabilities, similar to ones we already fixed, which we cannot currently duplicate. The purpose of this release is to establish a new baseline for testing before the next 1.30.3 release. If any of the remaining vulnerabilities turn out to be valid, understand that they require valid ZoneMinder user credentials to implement.

Because some of the vulnerabilities go back as far as our github history tracks, we recommend everyone upgrade to this version of ZoneMinder.

Yes, this also means the next 1.30.3 release will also be a bug fix release. It will not be a new feature release as we had hoped.

Thank You to Those who have Contributed

First, a big thank you to those who have contributed their time to this project, or who have contributed financially. The money donated to the project is primarily used to maintain an Internet presence. The donated funds are not used as income for our developers. We do occasionally assign funds to open issues through Bountysource, but those funds can be claimed by anyone who does the work. We all, from those that respond to questions in the forums to those who develop the underlying code, are effectively volunteers, each with our own $dayjobs. We participate because we want to be part of an open-source, community project, which brings me to my next point.

We know from our telemetry data that ZoneMinder has an extremely large user base. In just one week, we received 20k ip addresses, actively running ZoneMinder, and those sites are just the sites who have the telemetry data enabled. On the flip side to this, there are comparatively few people who contribute back to the project. This puts us in a perpetual situation where we cannot keep up whether that be responding in the forums, writing new code, fixing existing code, writing documentation, etc. We are looking for help from mature individuals who understand what it means to be part of a team project. To become part of the team, you don't need to know how to do a particular task, write code, etc. Rather, you simply need a strong desire to learn and interact with the other members.

Bug Fix Release

While there are a few new features, this release focuses on bug fixes and improvements to existing code.

Here is the short list of changes:

  • Various sql injection, xss, and other vulnerabilities have been fixed.
  • CVE-2017-5368, CVE-2016-10206 Added CSRF mitigation. This option ENABLE_CSRF_MAGIC defaults to OFF currently and must be turned on under Options. Packagers should choose to default on to resolve CVE-2017-5368 and CVE-2016-10206. If a package maintainer wants to change the default, then they should do the following in the build script before calling cmake: ./utils/zmeditconfigdata.sh ZM_ENABLE_CSRF_MAGIC yes
  • Fixed an issue where the red outline did not appear in images with blob detection enabled
  • The new ONVIF probe should now properly detect many more ONVIF compliant cameras
  • A few security fixes were implemented to help mitigate malicious activity
  • Various updates to the documentation including an emphasis to use the "ffmpeg" source type for modern IP cameras. Only use the other source types if there is a problem using ffmpeg.
  • New Hikvision & Keekon PTZ control scripts have been added
  • Since the amount of free /dev/shm memory is critical, this is now shown at the top of the web console.

A Notice about the next release following 1.30.3

We have had a number of big ticket items in the works for a while now, and after a recent discussion, we have decided to implement some, or perhaps all, of these major features following the release of 1.30.3. I won't name there here, because the list of features we deploy might change. What I do want to emphasize, however, is that the release which contains these new features will need to run its course to find and work out any bugs which will likely be introduced. So if you are running a production system and don't want reliability to suffer, then I would recommend you upgrade to 1.30.3, but skip the next release after that.

As always, here is the long list of changes:

Change Log

1.30.2 (2017-03-30)

Full Changelog

Merged pull requests:

1.30.2-rc.1 (2017-02-05)

Full Changelog

Merged pull requests:

Read more
Assets 2
Loading