Package Details: unifi-video 3.10.13-2

Git Clone URL: https://aur.archlinux.org/unifi-video.git (read-only, click to copy)
Package Base: unifi-video
Description: Centralized management system for Ubiquiti UniFi surveillance cameras.
Upstream URL: https://www.ubnt.com/
Licenses: custom
Conflicts: unifi-video-beta
Submitter: fryfrog
Maintainer: torben
Last Packager: torben
Votes: 10
Popularity: 0.000000
First Submitted: 2016-04-18 17:44 (UTC)
Last Updated: 2021-12-28 10:51 (UTC)

Dependencies (6)

Required by (0)

Sources (5)

Pinned Comments

torben commented on 2023-01-04 09:20 (UTC) (edited on 2023-01-04 09:20 (UTC) by torben)

Please be aware, that Ubiquity has discontinued support for Unifi-Video..

I will keep an eye on this package while I am still using it, but please understand that without support von Ubiquity there isn't much I can do in case of problems with the app itself.

Also, I strongly recommend no longer publishing Unifi-Video unprotected on the Web. Work under the assumption, that this application can be breached.

torben commented on 2021-12-18 16:55 (UTC) (edited on 2021-12-27 14:04 (UTC) by torben)

Version 3.10.13-2 mitigates the log4j JNDI vulnerability out of the box

Be aware, that unifi-video is affected by the recent log4j JNDI Lookup vulnerabilities. As Ubiquity is no longer maintaining this piece of software, we can't expect an update.

The best mitigation (removing the JNDI Lookup Ability in log4j) for unifi-video can be found here:

https://community.ui.com/questions/Mitigating-the-Java-Log4J-exploit-in-UniFi-Video-on-Debian-Ubuntu/c59621d2-3cbf-48aa-9780-76477e0b1d39#answer/06ed75d6-113c-4230-9d44-7394e4ba2542

Basically, it removes the corresponding lookup-class from log4j-core.jar via:

zip -q -d log4j-core-*.jar org/apache/logging/log4j/core/lookup/JndiLookup.class

I strongly recommend everybody to update either to 3.10.13-2 or to fix the log4j JAR file manually.

Latest Comments

« First ‹ Previous 1 2 3 4 5 Next › Last »

klden commented on 2017-07-15 21:42 (UTC)

Hey, any idea why I can't see the live view for my camera? I can however see the jpg images every 1 sec :S

paco3346 commented on 2017-05-04 20:33 (UTC) (edited on 2017-05-04 20:33 (UTC) by paco3346)

It's good to give back. I almost had to give up and just spin up a Ubuntu 16.04 server but reeeaaally wanted to stay with Arch. Love my Arch.

fryfrog commented on 2017-05-04 19:21 (UTC)

Thanks a bunch to *you* for finding the issues. I'm using a docker container, but at some point I'll re-test running it native. :)

paco3346 commented on 2017-05-04 19:05 (UTC)

Ah yes, I see your permissions update in there. I think I probably caused a few things to be owned by root while I was poking around. (I ran a few things as sudo). Thanks for updating!

fryfrog commented on 2017-05-04 05:00 (UTC) (edited on 2017-05-04 05:28 (UTC) by fryfrog)

Thanks for poking around, I'll fiddle these changes into the package and see how it turns out. Edit: Package updated, .patch file added to fix server.xml. And java-runtime>=8 dependency. I'm not going to do a chown as part of it, that already happens as part of post_install.

paco3346 commented on 2017-05-04 02:40 (UTC) (edited on 2017-05-04 04:26 (UTC) by paco3346)

Bingo! 4 hours later... There's something broken with the gzip compression in tomcat. You can disable it by modifying /usr/lib/unifi-video/conf/server.xml and looking for all references of compression="on" I'll let you guess what value you should update it to :) Also, this is no longer jre7 compatible. Lots of "Could not initialize class javax.imageio.ImageIO" Runs swimmingly well with 8 Hey, me again. Edit #3. You'll also need to sudo chown -R unufi-video:unifi-video /usr/lib/unifi-video/conf/evostream/ if you run into problems with getting a single frame of video but no stream or recording

fryfrog commented on 2017-03-26 03:45 (UTC)

I had enough trouble w/ unifi-video on Arch that I've switched to using a docker image based on Ubuntu. I found an existing one that was pretty good and then improved the heck out of it. If any of you are having trouble w/ it from this AUR package, consider giving the docker version a try. https://hub.docker.com/r/pducharme/unifi-video-controller/

fryfrog commented on 2017-02-21 20:24 (UTC)

An Ubuntu vm was my next step if I hadn't just randomly tried to load up video.ubnt.com for no dang reason and it saw my nvr. I didn't even know it'd do that.

ssgross commented on 2017-02-21 19:03 (UTC)

Will try doing fryfrog's suggestion when i get a chance. For now, I have it up in running in a headless vm running ubuntu. i also had success with it working using a docker container following the suggestions of https://github.com/rednut/docker-unifi-video-controller

fryfrog commented on 2017-02-19 03:58 (UTC)

Can those that have been having problems try doing the setup using https://video.ubnt.com from a computer on the network where the nvr software is installed? I just tried that after spending a few frustrating hours trying to do it as I'd expected using http://ip:7080/. It worked. :/

« First ‹ Previous 1 2 3 4 5 Next › Last »