summarylogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--PKGBUILD9
1 files changed, 8 insertions, 1 deletions
diff --git a/PKGBUILD b/PKGBUILD
index ca75ef5c01ea..bf433a7687c3 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -1,12 +1,14 @@
# Maintainer: Donald Webster (fryfrog@gmail.com)
+# Contributor: Torben Nehmer (torben+aur-unifi-video at nehmer dot net)
pkgname=unifi-video
pkgver=3.10.13
-pkgrel=1
+pkgrel=2
pkgdesc="Centralized management system for Ubiquiti UniFi surveillance cameras."
arch=('x86_64')
url="https://www.ubnt.com/"
license=('custom')
+makedepends=('zip')
depends=(
'mongodb'
'java-runtime>=8'
@@ -37,6 +39,11 @@ package() {
cd "${pkgdir}/usr/bin"
patch -N < "${srcdir}/unifi-video.patch"
+ # see also: https://logging.apache.org/log4j/2.x/security.html
+ echo "Fixing Log4j JNDI Lookup vulnerability by removing JndiLookup.class (CVE-2021-45046)"
+ cd "${pkgdir}/usr/lib/unifi-video/lib"
+ zip -v -q -d log4j-core-*.jar org/apache/logging/log4j/core/lookup/JndiLookup.class
+
install -D -m 644 "${srcdir}/unifi-video.service" "${pkgdir}/usr/lib/systemd/system/unifi-video.service"
install -D -m 644 "${srcdir}/unifi-video.sysusers" "${pkgdir}/usr/lib/sysusers.d/unifi-video.conf"
install -D -m 644 "${srcdir}/unifi-video.tmpfiles" "${pkgdir}/usr/lib/tmpfiles.d/unifi-video.conf"