@knight-of-ni knight-of-ni released this Oct 13, 2018 · 132 commits to master since this release

Assets 2

Thank You to Those who have Contributed

We continue to thank those that have contributed to the ZoneMinder project. We are always in need of volunteers, not just to write code, but to help manage the user forum, manage wiki content, write documentation, test the latest master branch, etc. There is always far more work to do than people available to do the work.

Bug Fix Release

This is a bug fix release that fixes issues of moderate severity.

Here is a summary:

  • Additional fixes to zmtrigger
  • Additional fixes to zmfilter
  • remember navbar collapse selection
  • don't build neon instructions on armel architecture
  • don't refresh the page during an Ajax timeout error

What's New

If you are upgrading from a release older than 1.32.0, then you should read the release notes for that release. There are several key changes you should be aware of.

Change Log

1.32.2 (2018-10-13)

Full Changelog

Merged pull requests:

* This Change Log was automatically generated by github_changelog_generator

@knight-of-ni knight-of-ni released this Oct 2, 2018 · 193 commits to master since this release

Assets 2

Thank You to Those who have Contributed

We continue to thank those that have contributed to the ZoneMinder project. We are always in need of volunteers, not just to write code, but to help manage the user forum, manage wiki content, write documentation, test the latest master branch, etc. There is always far more work to do than people available to do the work.

Bug Fix Release

This is a bug fix release that fixes several key problems. We recommend everyone update immediately.

Here is a summary:

  • Fix zmaudit ignoring the archive flag
  • Fix issues due to the way events are stored
  • Fix zmtrigger ignoring recently changed monitors
  • Reload the page properly on ajax error (avoids "permission denied" screen)
  • Fix x264 encode method corrupting shared memory
  • Fix the export button on the log view

What's New

If you are upgrading from a release older than 1.32.0, then you should read the release notes for that release. There are several key changes you should be aware of.

Change Log

1.32.1 (2018-10-01)

Full Changelog

Merged pull requests:

* This Change Log was automatically generated by github_changelog_generator

@knight-of-ni knight-of-ni released this Sep 12, 2018 · 287 commits to master since this release

Assets 2

Thank You to Those who have Contributed

We continue to thank those that have contributed to the ZoneMinder project. We are always in need of volunteers, not just to write code, but to help manage the user forum, manage wiki content, write documentation, test the latest master branch, etc. There is always far more work to do than people available to do the work.

This version of ZoneMinder includes a new look, which means our documentation is in need of being updated. The only requirement is a desire to learn a fairly intuitive markdown language. Please consider volunteering your time.

What's New

There are significant changes to this release.

Here is a brief summary:

  • A re-worked web console, compared to the previous 1.30.4 release
  • record to mp4 container
  • record audio
  • support for php 7.x
  • Arbitrary website as a non-recordable, interactive monitor.
  • Updated Montage Review
  • Options-> Paths moved into config files under conf.d folder
  • Multiple storage paths are supported. See Options -> Storage
  • The old method of bind mounting the event folder is no longer needed nor recommended
  • Additional system statistics on the web console
  • Raspberry pi OMX hardware h264 decoder support
  • Event thumbnails play video on mouseover
  • Drag and drop sorting of monitors
  • Scalability improvements
  • Support for Redhat el6 distros and clones has been removed

Existing Users

For those of you upgrading from a previous version of ZoneMinder:

  • The upgrade scripts will take longer than normal to run, especially if you have many events
  • Your previous settings on the Options -> Paths tab have been moved into the file zmcustom.conf which is typically found under /etc/zm/conf.d
  • Consider migrating your events folder from the former bind mount method to the new method under Options -> Storage
  • You should no longer have symbolic links in your webroot folder. This resolves a long standing security issue.
  • The Apache config file has changed. This config file may or may not update automatically. This depends on what distro you are running and how you installed ZoneMinder. Please refer to the documentation for your distro to learn what specific steps are required.

Attention Package Managers

There are some fairly significant changes that must be completed to your packing scripts in order for ZoneMinder to install properly. Please contact us to coordinate the changes to your packaging scripts. A brief summary of the requirements is listed here: #2078 (comment)

Change Log

1.32.0 (2018-09-12)

Full Changelog

Merged pull requests:

* This Change Log was automatically generated by github_changelog_generator

@knight-of-ni knight-of-ni released this May 9, 2017 · 5404 commits to master since this release

Assets 2

Small Fix

This release has been created to address an issue which was discovered in the new uridecode function. There are some minor packaging related changes made as well. What follows has been copied and pasted from the previous release notes to make sure everyone reads it.

Cake PHP API Note

The previous 1.30.2 release disabled cake php debug mode due to a potential security vulnerability. Be advised that, because cake debug mode is off, the cake debug web page, typically navigated to with a /zm/api suffix, is also turned off. The API itself will continue to function normally.

Important Note to Package Maintainers

Switching to the php apc cache engine adds a new package dependency on the php-apc or php-apcu package. The exact name of the package varies per distro. The API will not function without this package installed and the web server restarted.

Nightly Builds

We have recently enabled a nightly build system, which is cranking out rpm & deb packages almost as fast as we make changes to the source code. If you have an interest in testing a recent build of the master branch then this is for you. This will allow you to test bleeding edge software changes w/o having to first be an expert in building rpm or deb packages. Nightly build rpm packages are currently available at zmrepo.zoneminder.com. As soon as I learn where Isaac is hosting the deb packages, I will update these release notes.

Thank You to Those who have Contributed

We continue to thank those that have contributed to the ZoneMinder project. We are always in need of volunteers, not just to write code, but to help manage the user forum, manage wiki content, write documentation, test the latest master branch, etc. There is always far more work to do than people available to do the work.

What follows is the complete change log since our previous release:

Change Log

1.30.4 (2017-05-09)

Full Changelog

Merged pull requests:

@knight-of-ni knight-of-ni released this May 2, 2017 · 5429 commits to master since this release

Assets 2

One More bug Fix Release

The ZoneMinder team is proud to release one more bug release before we move on to bigger things.

There are not as many changes this go around, but here is a summary of the most significant:

  • The cake php cache engine has been changed from flat files to php apc. No more API failures due to missing folders.
  • A previous security vulnerability fix introduced a bug restarting zma/zmc. This has been fixed.
  • Fixed a long standing issue where the timestamp would disappear when TIMESTAMP_ON_CAPTURE was disabled.
  • Historically, zms has never supported extended ascii characters in camera passwords. This has been fixed.

Cake PHP API Note

The previous 1.30.2 release disabled cake php debug mode due to a potential security vulnerability. Be advised that, because cake debug mode is off, the cake debug web page, typically navigated to with a /zm/api suffix, is also turned off. The API itself will continue to function normally.

Important Note to Package Maintainers

Switching to the php apc cache engine adds a new package dependency on the php-apc or php-apcu package. The exact name of the package varies per distro. The API will not function without this package installed and the web server restarted.

Nightly Builds

We have recently enabled a nightly build system, which is cranking out rpm & deb packages almost as fast as we make changes to the source code. If you have an interest in testing a recent build of the master branch then this is for you. This will allow you to test bleeding edge software changes w/o having to first be an expert in building rpm or deb packages. Nightly build rpm packages are currently available at zmrepo.zoneminder.com. As soon as I learn where Isaac is hosting the deb packages, I will update these release notes.

Thank You to Those who have Contributed

We continue to thank those that have contributed to the ZoneMinder project. We are always in need of volunteers, not just to write code, but to help manage the user forum, manage wiki content, write documentation, test the latest master branch, etc. There is always far more work to do than people available to do the work.

What follows is the complete change log since our previous release:

Change Log

1.30.3 (2017-05-02)

Full Changelog

Merged pull requests:

@knight-of-ni knight-of-ni released this Mar 30, 2017 · 5597 commits to master since this release

Assets 2

Slight Change of Plans

Vulnerabilities! Yikes!
We had several reports of vulnerabilities come in during the last release candidate. We thank the security professionals for taking the time to review our project and have been hard at work implementing fixes. There are a few remaining vulnerabilities, similar to ones we already fixed, which we cannot currently duplicate. The purpose of this release is to establish a new baseline for testing before the next 1.30.3 release. If any of the remaining vulnerabilities turn out to be valid, understand that they require valid ZoneMinder user credentials to implement.

Because some of the vulnerabilities go back as far as our github history tracks, we recommend everyone upgrade to this version of ZoneMinder.

Yes, this also means the next 1.30.3 release will also be a bug fix release. It will not be a new feature release as we had hoped.

Thank You to Those who have Contributed

First, a big thank you to those who have contributed their time to this project, or who have contributed financially. The money donated to the project is primarily used to maintain an Internet presence. The donated funds are not used as income for our developers. We do occasionally assign funds to open issues through Bountysource, but those funds can be claimed by anyone who does the work. We all, from those that respond to questions in the forums to those who develop the underlying code, are effectively volunteers, each with our own $dayjobs. We participate because we want to be part of an open-source, community project, which brings me to my next point.

We know from our telemetry data that ZoneMinder has an extremely large user base. In just one week, we received 20k ip addresses, actively running ZoneMinder, and those sites are just the sites who have the telemetry data enabled. On the flip side to this, there are comparatively few people who contribute back to the project. This puts us in a perpetual situation where we cannot keep up whether that be responding in the forums, writing new code, fixing existing code, writing documentation, etc. We are looking for help from mature individuals who understand what it means to be part of a team project. To become part of the team, you don't need to know how to do a particular task, write code, etc. Rather, you simply need a strong desire to learn and interact with the other members.

Bug Fix Release

While there are a few new features, this release focuses on bug fixes and improvements to existing code.

Here is the short list of changes:

  • Various sql injection, xss, and other vulnerabilities have been fixed.
    • CVE-2017-7203 is a duplicate of CVE-2017-5367 fixed ea5342a
    • CVE-2017-5595 fixed 8b19fca
    • CVE-2016-10205, CVE-2016-10204 fixed #1764
    • CVE-2016-10201 fixed c5906a5
  • CVE-2017-5368, CVE-2016-10206 Added CSRF mitigation. This option ENABLE_CSRF_MAGIC defaults to OFF currently and must be turned on under Options. Packagers should choose to default on to resolve CVE-2017-5368 and CVE-2016-10206. If a package maintainer wants to change the default, then they should do the following in the build script before calling cmake: ./utils/zmeditconfigdata.sh ZM_ENABLE_CSRF_MAGIC yes
  • Fixed an issue where the red outline did not appear in images with blob detection enabled
  • The new ONVIF probe should now properly detect many more ONVIF compliant cameras
  • A few security fixes were implemented to help mitigate malicious activity
  • Various updates to the documentation including an emphasis to use the "ffmpeg" source type for modern IP cameras. Only use the other source types if there is a problem using ffmpeg.
  • New Hikvision & Keekon PTZ control scripts have been added
  • Since the amount of free /dev/shm memory is critical, this is now shown at the top of the web console.

A Notice about the next release following 1.30.3

We have had a number of big ticket items in the works for a while now, and after a recent discussion, we have decided to implement some, or perhaps all, of these major features following the release of 1.30.3. I won't name there here, because the list of features we deploy might change. What I do want to emphasize, however, is that the release which contains these new features will need to run its course to find and work out any bugs which will likely be introduced. So if you are running a production system and don't want reliability to suffer, then I would recommend you upgrade to 1.30.3, but skip the next release after that.

As always, here is the long list of changes:

Change Log

1.30.2 (2017-03-30)

Full Changelog

Merged pull requests:

1.30.2-rc.1 (2017-02-05)

Full Changelog

Merged pull requests:

* This Change Log was automatically generated by github_changelog_generator

Pre-release

@knight-of-ni knight-of-ni released this Feb 5, 2017 · 76 commits to release-1.30.2 since this release

Assets 2

Thank You to Those who have Contributed

First, a big thank you to those who have contributed their time to this project, or who have contributed financially. The money donated to the project is primarily used to maintain an Internet presence. The donated funds are not used as income for our developers. We do occasionally assign funds to open issues through Bountysource, but those funds can be claimed by anyone who does the work. We all, from those that respond to questions in the forums to those who develop the underlying code, are effectively volunteers, each with our own $dayjobs. We participate because we want to be part of an open-source, community project, which brings me to my next point.

We know from our telemetry data that ZoneMinder has an extremely large user base. In just one week, we received 20k ip addresses, actively running ZoneMinder, and those sites are just the sites who have the telemetry data enabled. On the flip side to this, there are comparatively few people who contribute back to the project. This puts us in a perpetual situation where we cannot keep up whether that be responding in the forums, writing new code, fixing existing code, writing documentation, etc. We are looking for help from mature individuals who understand what it means to be part of a team project. To become part of the team, you don't need to know how to do a particular task, write code, etc. Rather, you simply need a strong desire to learn and interact with the other members.

Bug Fix Release

While there are a few new features, this release focuses on bug fixes and improvements to existing code.

Here is the short list of changes:

  • Fixed an issue where the red outline did not appear in images with blob detection enabled
  • The new ONVIF probe should now properly detect many more ONVIF compliant cameras
  • A few security fixes were implemented to help mitigate malicious activity
  • Various updates to the documentation including an emphasis to use the "ffmpeg" source type for modern IP cameras. Only use the other source types if there is a problem using ffmpeg.
  • New Hikvision & Keekon PTZ control scripts have been added
  • Since the amount of free /dev/shm memory is critical, this is now shown at the top of the web console.

A Notice about the next release following 1.30.2

We have had a number of big ticket items in the works for a while now, and after a recent discussion, we have decided to implement some, or perhaps all, of these major features following the release of 1.30.2. I won't name there here, because the list of features we deploy might change. What I do want to emphasize, however, is that the release which contains these new features will need to run its course to find and work out any bugs which will likely be introduced. So if you are running a production system and don't want reliability to suffer, then I would recommend you upgrade to 1.30.2, but skip the next release after that.

As always, here is the long list of changes:

Change Log

1.30.2-rc.1 (2017-02-05)

Full Changelog

Merged pull requests:

* This Change Log was automatically generated by github_changelog_generator

Jan 10, 2017
create tag 1.30.1-rc.1

@knight-of-ni knight-of-ni released this Jul 28, 2016 · 6010 commits to master since this release

Assets 3

Important Changes!

This release has additional Perl dependencies associated with Onvif discovery and the telemetry daemon. If you are installing from a package, the package maintainer should take care of this for you.

As mentioned in the previous release notes, these features have been removed from the project:

  • Autotools – Build using cmake instead
  • Mobile Skin – Use a mobile app, such as zmNinja
  • XML Skin – Use the new API instead

Last minute changes

  • Fixed an issue zmvideo.pl which affected emailing and exporting video

Changes Included with RC2

  • An issue with the latest libjpeg-turbo 1.5.0 was discovered and fixed
  • Update Ubuntu and Debian documentation
  • Additional enhancements and fixes to zmonvif-probe
  • Zones were incorrectly reporting a size of 100% when they were smaller. This has been fixed.
  • Fixed an warning message from zmupdate.pl

New Features

Onvif discovery is now enabled by default. This features increases build time, but the benefit is auto-discovery of any Onvif compliant camera. Please note that this feature is still experimental. It has not been tested in a large environment or with a large variety of cameras. Using this tool is largely self explanatory, but if you are looking for documentation it can be found on the @altaroca ’s blog site. As time allows, we will bring the documentation over to our readthedocs site. Volunteers to do this work are welcome.

ZoneMinder now has a telemetry deamon which collects information about your machine. This was done to learn how our user base uses ZoneMinder, the most common system size, choice of distro, cpu, memory, and a couple of other things. This will help us focus our efforts on what features get used the most. Since this was written in Perl, you can easily see for yourself what information is being sent. Note that this feature defaults to ON. If this is not what you want, then you can turn it off under Options. In a future release, we plan to include an install wizard, which will prompt the user about this feature.

Have you ever wished for the motion detection zones to be live, rather than a static image? Well they are now! Creating or modifying zones works exactly the same as before, but with the live stream running in the background. If you need to freeze the stream, there is a Pause button at the bottom of the window to do just that.

A new feature called Montage Review has been added. This can be thought of as a modified version of the original montage feature with features such as "scrubbing" through video. The Montage Review screen has received sufficient testing to be part of the release, but you should still treat this feature as experimental. We expect there to be additional fixes and refinements.

Change Log

v1.30.0 (2016-07-28)

Full Changelog

Merged pull requests:

v1.30.0-rc2 (2016-07-06)

Full Changelog

Merged pull requests:

v1.30.0-rc1 (2016-06-01)

Full Changelog

Merged pull requests:

* This Change Log was automatically generated by github_changelog_generator

How to Get the Source Code

Due to the use of git submodules, we recommend you use git to clone the ZoneMinder repo to your local disk and then checkout release-1.30.0. However, we have also provided the file ZoneMinder-1.30.0.tar.gz for you below. It contains the source code and the required submodules. Do NOT click the links below labeled "Source code" as they do not contain the required git submodules and ZoneMinder will not build without them.

@knight-of-ni knight-of-ni released this Jul 6, 2016 · 7 commits to release-1.30.0 since this release

Assets 3

Important Changes!

This release has additional Perl dependencies associated with Onvif discovery and the telemetry daemon. If you are installing from a package, the package maintainer should take care of this for you.

As mentioned in the previous release notes, these features have been removed from the project:

  • Autotools – Build using cmake instead
  • Mobile Skin – Use a mobile app, such as zmNinja
  • XML Skin – Use the new API instead

Changes Included with RC2

  • An issue with the latest libjpeg-turbo 1.5.0 was discovered and fixed
  • Update Ubuntu and Debian documentation
  • Additional enhancements and fixes to zmonvif-probe
  • Zones were incorrectly reporting a size of 100% when they were smaller. This has been fixed.
  • Fixed an warning message from zmupdate.pl

New Features

Onvif discovery is now enabled by default. This features increases build time, but the benefit is auto-discovery of any Onvif compliant camera. Please note that this feature is still experimental. It has not been tested in a large environment or with a large variety of cameras. Using this tool is largely self explanatory, but if you are looking for documentation it can be found on the @altaroca ’s blog site. As time allows, we will bring the documentation over to our readthedocs site. Volunteers to do this work are welcome.

ZoneMinder now has a telemetry deamon which collects information about your machine. This was done to learn how our user base uses ZoneMinder, the most common system size, choice of distro, cpu, memory, and a couple of other things. This will help us focus our efforts on what features get used the most. Since this was written in Perl, you can easily see for yourself what information is being sent. Note that this feature defaults to ON. If this is not what you want, then you can turn it off under Options. In a future release, we plan to include an install wizard, which will prompt the user about this feature.

Have you ever wished for the motion detection zones to be live, rather than a static image? Well they are now! Creating or modifying zones works exactly the same as before, but with the live stream running in the background. If you need to freeze the stream, there is a Pause button at the bottom of the window to do just that.

Change Log

1.30.0 (2016-07-06)

Full Changelog

Merged pull requests:

v1.30.0-rc1 (2016-06-01)

Full Changelog

Merged pull requests:

* This Change Log was automatically generated by github_changelog_generator

How to Get the Source Code

Due to the use of git submodules, we recommend you use git to clone the ZoneMinder repo to your local disk and then checkout release-1.30.0. However, we have also provided the file ZoneMinder-1.30.0.tar.gz for you below. It contains the source code and the required submodules. Do NOT click the links below labeled "Source code" as they do not contain the required git submodules and ZoneMinder will not build without them.