Package Details: unifi-video 3.10.13-2

Git Clone URL: https://aur.archlinux.org/unifi-video.git (read-only, click to copy)
Package Base: unifi-video
Description: Centralized management system for Ubiquiti UniFi surveillance cameras.
Upstream URL: https://www.ubnt.com/
Licenses: custom
Conflicts: unifi-video-beta
Submitter: fryfrog
Maintainer: torben
Last Packager: torben
Votes: 10
Popularity: 0.000000
First Submitted: 2016-04-18 17:44 (UTC)
Last Updated: 2021-12-28 10:51 (UTC)

Dependencies (6)

Required by (0)

Sources (5)

Pinned Comments

torben commented on 2023-01-04 09:20 (UTC) (edited on 2023-01-04 09:20 (UTC) by torben)

Please be aware, that Ubiquity has discontinued support for Unifi-Video..

I will keep an eye on this package while I am still using it, but please understand that without support von Ubiquity there isn't much I can do in case of problems with the app itself.

Also, I strongly recommend no longer publishing Unifi-Video unprotected on the Web. Work under the assumption, that this application can be breached.

torben commented on 2021-12-18 16:55 (UTC) (edited on 2021-12-27 14:04 (UTC) by torben)

Version 3.10.13-2 mitigates the log4j JNDI vulnerability out of the box

Be aware, that unifi-video is affected by the recent log4j JNDI Lookup vulnerabilities. As Ubiquity is no longer maintaining this piece of software, we can't expect an update.

The best mitigation (removing the JNDI Lookup Ability in log4j) for unifi-video can be found here:

https://community.ui.com/questions/Mitigating-the-Java-Log4J-exploit-in-UniFi-Video-on-Debian-Ubuntu/c59621d2-3cbf-48aa-9780-76477e0b1d39#answer/06ed75d6-113c-4230-9d44-7394e4ba2542

Basically, it removes the corresponding lookup-class from log4j-core.jar via:

zip -q -d log4j-core-*.jar org/apache/logging/log4j/core/lookup/JndiLookup.class

I strongly recommend everybody to update either to 3.10.13-2 or to fix the log4j JAR file manually.

Latest Comments

« First ‹ Previous 1 2 3 4 5 Next › Last »

fryfrog commented on 2017-02-19 02:48 (UTC)

I did a clean install and I'm having the same issue now. I can do step 1 and 2, but can't log in afterward. It just spits me back out to a login prompt. I tried downgrading to 3.6.0 and 3.5.2, but it did the same thing. There isn't even anything useful in the logs, I can see me log in but nothing else.

SH1986 commented on 2017-01-29 19:07 (UTC)

Hi fryfrog, The strange thing is, that there are no real errors in the log files. The only error line I got is: ERROR UpdateService: Error - airvisionUpdateInfo is null in UpdateService-UpdateCheckTask ERROR UpdateService - processAirVisionUpdate() - No Airvision Update Info in UpdateService-UpdateCheckTask I have now tried this on a totally clean/reinstall archlinux, there is nothing else installed than unification-video. Best Regards Soren Hansen

fryfrog commented on 2017-01-29 03:19 (UTC)

Is there anything in the logs?

SH1986 commented on 2017-01-29 00:18 (UTC)

ssgross, did you managed to get this version running on arch? I have exact the same problem as you "Unexpected Error, the server responded with status code of 404" I have tried with a clean install of this packaged (Deleted all my config) but the problem persists.

ssgross commented on 2017-01-25 19:23 (UTC)

found an error that appears sometimes, and sometimes not, about wired tiger not being able to connect to mongodb. Also curios: I installed a clean vm install of the latest ubuntu 16.04lts. I was unable to install unifi-video there because it claims openjdk 8 headless as a dependency, but only 7 is available in any of the repos, even after a full update/upgrade. i'm going to try and make a pkg build for an older version of unifi-video and see if i can get it to work...consistantly. i think there is some versioning or library version issues that are preventing it from running in arch. i'm hesitant to start up a thread at ubnt, all of the other distro related questions there get either unanswered, or end simply with no support is planned.

ssgross commented on 2017-01-24 00:32 (UTC)

still didn't work. i get to the screen setup/2, and get Unexpected Error, the server responded with status code of 404. try again, and get same with 400. my clean install test was a vm from a few months ago. my guess is some update from then till now is breaking it.i downgraded all the java dependencies to those on my vm to no avail. i'm going to update the vm now and reinstall unifi-video and see if it still works. I hav a suspicion it's mongodb (i was running3.2.9-1 when it worked)

fryfrog commented on 2017-01-23 18:49 (UTC)

While I get a clean Arch VM setup to test, can you give this update a shot?

fryfrog commented on 2017-01-23 18:33 (UTC)

If `java` isn't in your path, you need to select which one you want active. It works fine with jre8, that is what I'm using it with. 0 ✓ fryfrog@apollo ~ $ archlinux-java status Available Java environments: java-7-openjdk/jre java-8-openjdk/jre (default) I will however modify the dependency to be 'java-runtime' and add the hostname -I -> hostname -i patch.

ssgross commented on 2017-01-23 13:07 (UTC)

seemed to have got this working, but it failed after the first screen. running # unifi-video --debug start shows a few things. which: no java in (.........) fix: jre7 seems to be required, loads successfully after installing. suggest adding dependency hostname: invalid option -- 'I' to fix, edit /usr/bin/unifi-video line 254, replace hostname -I with hostname -i. suggest adding this to patch. the above was noticed in a clean arch install in a VM, and all seems to be working. still working on getting it up on my desktop. seems unifi-video doesn't like to be started via ssh.

fryfrog commented on 2017-01-23 01:18 (UTC)

I guess I'd fixed this locally and forgotten to push it... but I forgot I'd done it and blew away my local git repo when trying to repro... anyway, fixed now.

« First ‹ Previous 1 2 3 4 5 Next › Last »