Package Details: unifi-video 3.10.13-2

Git Clone URL: https://aur.archlinux.org/unifi-video.git (read-only, click to copy)
Package Base: unifi-video
Description: Centralized management system for Ubiquiti UniFi surveillance cameras.
Upstream URL: https://www.ubnt.com/
Licenses: custom
Conflicts: unifi-video-beta
Submitter: fryfrog
Maintainer: torben
Last Packager: torben
Votes: 10
Popularity: 0.000000
First Submitted: 2016-04-18 17:44 (UTC)
Last Updated: 2021-12-28 10:51 (UTC)

Dependencies (6)

Required by (0)

Sources (5)

Pinned Comments

torben commented on 2023-01-04 09:20 (UTC) (edited on 2023-01-04 09:20 (UTC) by torben)

Please be aware, that Ubiquity has discontinued support for Unifi-Video..

I will keep an eye on this package while I am still using it, but please understand that without support von Ubiquity there isn't much I can do in case of problems with the app itself.

Also, I strongly recommend no longer publishing Unifi-Video unprotected on the Web. Work under the assumption, that this application can be breached.

torben commented on 2021-12-18 16:55 (UTC) (edited on 2021-12-27 14:04 (UTC) by torben)

Version 3.10.13-2 mitigates the log4j JNDI vulnerability out of the box

Be aware, that unifi-video is affected by the recent log4j JNDI Lookup vulnerabilities. As Ubiquity is no longer maintaining this piece of software, we can't expect an update.

The best mitigation (removing the JNDI Lookup Ability in log4j) for unifi-video can be found here:

https://community.ui.com/questions/Mitigating-the-Java-Log4J-exploit-in-UniFi-Video-on-Debian-Ubuntu/c59621d2-3cbf-48aa-9780-76477e0b1d39#answer/06ed75d6-113c-4230-9d44-7394e4ba2542

Basically, it removes the corresponding lookup-class from log4j-core.jar via:

zip -q -d log4j-core-*.jar org/apache/logging/log4j/core/lookup/JndiLookup.class

I strongly recommend everybody to update either to 3.10.13-2 or to fix the log4j JAR file manually.

Latest Comments

« First ‹ Previous 1 2 3 4 5

ssgross commented on 2017-01-22 22:11 (UTC)

the patch fails with patching file unifi-video Hunk #1 FAILED at 42.

fryfrog commented on 2016-07-22 17:25 (UTC)

So I don't use unifi-video yet, I don't know if my original setup was working... but when during the attempt to get the 3.3.0 update working, afterwards it definitely wouldn't stop successfully and was throwing input output errors in the mongodb log file. So this update may or may not work for you. I nuked everything and did a clean install and ran through the setup wizard, so *that* does work. Good luck, maybe someday I'll get my cameras. :/

« First ‹ Previous 1 2 3 4 5