Skip to content

Releases: ZoneMinder/zoneminder

Turn the Page

02 Oct 12:31

Choose a tag to compare

Thank You to Those who have Contributed

We continue to thank those that have contributed to the ZoneMinder project. We are always in need of volunteers, not just to write code, but to help manage the user forum, manage wiki content, write documentation, test the latest master branch, etc. There is always far more work to do than people available to do the work.

Bug Fix Release

This is a bug fix release that fixes several key problems. We recommend everyone update immediately.

Here is a summary:

  • Fix zmaudit ignoring the archive flag
  • Fix issues due to the way events are stored
  • Fix zmtrigger ignoring recently changed monitors
  • Reload the page properly on ajax error (avoids "permission denied" screen)
  • Fix x264 encode method corrupting shared memory
  • Fix the export button on the log view

What's New

If you are upgrading from a release older than 1.32.0, then you should read the release notes for that release. There are several key changes you should be aware of.

Change Log

1.32.1 (2018-10-01)

Full Changelog

Merged pull requests:

* This Change Log was automatically generated by github_changelog_generator

Nothing Else Matters

12 Sep 13:20

Choose a tag to compare

Thank You to Those who have Contributed

We continue to thank those that have contributed to the ZoneMinder project. We are always in need of volunteers, not just to write code, but to help manage the user forum, manage wiki content, write documentation, test the latest master branch, etc. There is always far more work to do than people available to do the work.

This version of ZoneMinder includes a new look, which means our documentation is in need of being updated. The only requirement is a desire to learn a fairly intuitive markdown language. Please consider volunteering your time.

What's New

There are significant changes to this release.

Here is a brief summary:

  • A re-worked web console, compared to the previous 1.30.4 release
  • record to mp4 container
  • record audio
  • support for php 7.x
  • Arbitrary website as a non-recordable, interactive monitor.
  • Updated Montage Review
  • Options-> Paths moved into config files under conf.d folder
  • Multiple storage paths are supported. See Options -> Storage
  • The old method of bind mounting the event folder is no longer needed nor recommended
  • Additional system statistics on the web console
  • Raspberry pi OMX hardware h264 decoder support
  • Event thumbnails play video on mouseover
  • Drag and drop sorting of monitors
  • Scalability improvements
  • Support for Redhat el6 distros and clones has been removed

Existing Users

For those of you upgrading from a previous version of ZoneMinder:

  • The upgrade scripts will take longer than normal to run, especially if you have many events
  • Your previous settings on the Options -> Paths tab have been moved into the file zmcustom.conf which is typically found under /etc/zm/conf.d
  • Consider migrating your events folder from the former bind mount method to the new method under Options -> Storage
  • You should no longer have symbolic links in your webroot folder. This resolves a long standing security issue.
  • The Apache config file has changed. This config file may or may not update automatically. This depends on what distro you are running and how you installed ZoneMinder. Please refer to the documentation for your distro to learn what specific steps are required.

Attention Package Managers

There are some fairly significant changes that must be completed to your packing scripts in order for ZoneMinder to install properly. Please contact us to coordinate the changes to your packaging scripts. A brief summary of the requirements is listed here: #2078 (comment)

Change Log

1.32.0 (2018-09-12)

Full Changelog

Merged pull requests:

Read more

The Frayed Ends of Sanity

09 May 14:56

Choose a tag to compare

Small Fix

This release has been created to address an issue which was discovered in the new uridecode function. There are some minor packaging related changes made as well. What follows has been copied and pasted from the previous release notes to make sure everyone reads it.

Cake PHP API Note

The previous 1.30.2 release disabled cake php debug mode due to a potential security vulnerability. Be advised that, because cake debug mode is off, the cake debug web page, typically navigated to with a /zm/api suffix, is also turned off. The API itself will continue to function normally.

Important Note to Package Maintainers

Switching to the php apc cache engine adds a new package dependency on the php-apc or php-apcu package. The exact name of the package varies per distro. The API will not function without this package installed and the web server restarted.

Nightly Builds

We have recently enabled a nightly build system, which is cranking out rpm & deb packages almost as fast as we make changes to the source code. If you have an interest in testing a recent build of the master branch then this is for you. This will allow you to test bleeding edge software changes w/o having to first be an expert in building rpm or deb packages. Nightly build rpm packages are currently available at zmrepo.zoneminder.com. As soon as I learn where Isaac is hosting the deb packages, I will update these release notes.

Thank You to Those who have Contributed

We continue to thank those that have contributed to the ZoneMinder project. We are always in need of volunteers, not just to write code, but to help manage the user forum, manage wiki content, write documentation, test the latest master branch, etc. There is always far more work to do than people available to do the work.

What follows is the complete change log since our previous release:

Change Log

1.30.4 (2017-05-09)

Full Changelog

Merged pull requests:

Turn the Page

02 May 18:30

Choose a tag to compare

One More bug Fix Release

The ZoneMinder team is proud to release one more bug release before we move on to bigger things.

There are not as many changes this go around, but here is a summary of the most significant:

  • The cake php cache engine has been changed from flat files to php apc. No more API failures due to missing folders.
  • A previous security vulnerability fix introduced a bug restarting zma/zmc. This has been fixed.
  • Fixed a long standing issue where the timestamp would disappear when TIMESTAMP_ON_CAPTURE was disabled.
  • Historically, zms has never supported extended ascii characters in camera passwords. This has been fixed.

Cake PHP API Note

The previous 1.30.2 release disabled cake php debug mode due to a potential security vulnerability. Be advised that, because cake debug mode is off, the cake debug web page, typically navigated to with a /zm/api suffix, is also turned off. The API itself will continue to function normally.

Important Note to Package Maintainers

Switching to the php apc cache engine adds a new package dependency on the php-apc or php-apcu package. The exact name of the package varies per distro. The API will not function without this package installed and the web server restarted.

Nightly Builds

We have recently enabled a nightly build system, which is cranking out rpm & deb packages almost as fast as we make changes to the source code. If you have an interest in testing a recent build of the master branch then this is for you. This will allow you to test bleeding edge software changes w/o having to first be an expert in building rpm or deb packages. Nightly build rpm packages are currently available at zmrepo.zoneminder.com. As soon as I learn where Isaac is hosting the deb packages, I will update these release notes.

Thank You to Those who have Contributed

We continue to thank those that have contributed to the ZoneMinder project. We are always in need of volunteers, not just to write code, but to help manage the user forum, manage wiki content, write documentation, test the latest master branch, etc. There is always far more work to do than people available to do the work.

What follows is the complete change log since our previous release:

Change Log

1.30.3 (2017-05-02)

Full Changelog

Merged pull requests:

The Unforgiven

30 Mar 22:45

Choose a tag to compare

Slight Change of Plans

Vulnerabilities! Yikes!
We had several reports of vulnerabilities come in during the last release candidate. We thank the security professionals for taking the time to review our project and have been hard at work implementing fixes. There are a few remaining vulnerabilities, similar to ones we already fixed, which we cannot currently duplicate. The purpose of this release is to establish a new baseline for testing before the next 1.30.3 release. If any of the remaining vulnerabilities turn out to be valid, understand that they require valid ZoneMinder user credentials to implement.

Because some of the vulnerabilities go back as far as our github history tracks, we recommend everyone upgrade to this version of ZoneMinder.

Yes, this also means the next 1.30.3 release will also be a bug fix release. It will not be a new feature release as we had hoped.

Thank You to Those who have Contributed

First, a big thank you to those who have contributed their time to this project, or who have contributed financially. The money donated to the project is primarily used to maintain an Internet presence. The donated funds are not used as income for our developers. We do occasionally assign funds to open issues through Bountysource, but those funds can be claimed by anyone who does the work. We all, from those that respond to questions in the forums to those who develop the underlying code, are effectively volunteers, each with our own $dayjobs. We participate because we want to be part of an open-source, community project, which brings me to my next point.

We know from our telemetry data that ZoneMinder has an extremely large user base. In just one week, we received 20k ip addresses, actively running ZoneMinder, and those sites are just the sites who have the telemetry data enabled. On the flip side to this, there are comparatively few people who contribute back to the project. This puts us in a perpetual situation where we cannot keep up whether that be responding in the forums, writing new code, fixing existing code, writing documentation, etc. We are looking for help from mature individuals who understand what it means to be part of a team project. To become part of the team, you don't need to know how to do a particular task, write code, etc. Rather, you simply need a strong desire to learn and interact with the other members.

Bug Fix Release

While there are a few new features, this release focuses on bug fixes and improvements to existing code.

Here is the short list of changes:

  • Various sql injection, xss, and other vulnerabilities have been fixed.
  • CVE-2017-5368, CVE-2016-10206 Added CSRF mitigation. This option ENABLE_CSRF_MAGIC defaults to OFF currently and must be turned on under Options. Packagers should choose to default on to resolve CVE-2017-5368 and CVE-2016-10206. If a package maintainer wants to change the default, then they should do the following in the build script before calling cmake: ./utils/zmeditconfigdata.sh ZM_ENABLE_CSRF_MAGIC yes
  • Fixed an issue where the red outline did not appear in images with blob detection enabled
  • The new ONVIF probe should now properly detect many more ONVIF compliant cameras
  • A few security fixes were implemented to help mitigate malicious activity
  • Various updates to the documentation including an emphasis to use the "ffmpeg" source type for modern IP cameras. Only use the other source types if there is a problem using ffmpeg.
  • New Hikvision & Keekon PTZ control scripts have been added
  • Since the amount of free /dev/shm memory is critical, this is now shown at the top of the web console.

A Notice about the next release following 1.30.3

We have had a number of big ticket items in the works for a while now, and after a recent discussion, we have decided to implement some, or perhaps all, of these major features following the release of 1.30.3. I won't name there here, because the list of features we deploy might change. What I do want to emphasize, however, is that the release which contains these new features will need to run its course to find and work out any bugs which will likely be introduced. So if you are running a production system and don't want reliability to suffer, then I would recommend you upgrade to 1.30.3, but skip the next release after that.

As always, here is the long list of changes:

Change Log

1.30.2 (2017-03-30)

Full Changelog

Merged pull requests:

1.30.2-rc.1 (2017-02-05)

Full Changelog

Merged pull requests:

Read more

The Unforgiven (RC1)

05 Feb 18:14

Choose a tag to compare

The Unforgiven (RC1) Pre-release
Pre-release

Thank You to Those who have Contributed

First, a big thank you to those who have contributed their time to this project, or who have contributed financially. The money donated to the project is primarily used to maintain an Internet presence. The donated funds are not used as income for our developers. We do occasionally assign funds to open issues through Bountysource, but those funds can be claimed by anyone who does the work. We all, from those that respond to questions in the forums to those who develop the underlying code, are effectively volunteers, each with our own $dayjobs. We participate because we want to be part of an open-source, community project, which brings me to my next point.

We know from our telemetry data that ZoneMinder has an extremely large user base. In just one week, we received 20k ip addresses, actively running ZoneMinder, and those sites are just the sites who have the telemetry data enabled. On the flip side to this, there are comparatively few people who contribute back to the project. This puts us in a perpetual situation where we cannot keep up whether that be responding in the forums, writing new code, fixing existing code, writing documentation, etc. We are looking for help from mature individuals who understand what it means to be part of a team project. To become part of the team, you don't need to know how to do a particular task, write code, etc. Rather, you simply need a strong desire to learn and interact with the other members.

Bug Fix Release

While there are a few new features, this release focuses on bug fixes and improvements to existing code.

Here is the short list of changes:

  • Fixed an issue where the red outline did not appear in images with blob detection enabled
  • The new ONVIF probe should now properly detect many more ONVIF compliant cameras
  • A few security fixes were implemented to help mitigate malicious activity
  • Various updates to the documentation including an emphasis to use the "ffmpeg" source type for modern IP cameras. Only use the other source types if there is a problem using ffmpeg.
  • New Hikvision & Keekon PTZ control scripts have been added
  • Since the amount of free /dev/shm memory is critical, this is now shown at the top of the web console.

A Notice about the next release following 1.30.2

We have had a number of big ticket items in the works for a while now, and after a recent discussion, we have decided to implement some, or perhaps all, of these major features following the release of 1.30.2. I won't name there here, because the list of features we deploy might change. What I do want to emphasize, however, is that the release which contains these new features will need to run its course to find and work out any bugs which will likely be introduced. So if you are running a production system and don't want reliability to suffer, then I would recommend you upgrade to 1.30.2, but skip the next release after that.

As always, here is the long list of changes:

Change Log

1.30.2-rc.1 (2017-02-05)

Full Changelog

Merged pull requests:

Read more

The Day that Never Comes

28 Jul 23:34

Choose a tag to compare

Important Changes!

This release has additional Perl dependencies associated with Onvif discovery and the telemetry daemon. If you are installing from a package, the package maintainer should take care of this for you.

As mentioned in the previous release notes, these features have been removed from the project:

  • Autotools – Build using cmake instead
  • Mobile Skin – Use a mobile app, such as zmNinja
  • XML Skin – Use the new API instead

Last minute changes

  • Fixed an issue zmvideo.pl which affected emailing and exporting video

Changes Included with RC2

  • An issue with the latest libjpeg-turbo 1.5.0 was discovered and fixed
  • Update Ubuntu and Debian documentation
  • Additional enhancements and fixes to zmonvif-probe
  • Zones were incorrectly reporting a size of 100% when they were smaller. This has been fixed.
  • Fixed an warning message from zmupdate.pl

New Features

Onvif discovery is now enabled by default. This features increases build time, but the benefit is auto-discovery of any Onvif compliant camera. Please note that this feature is still experimental. It has not been tested in a large environment or with a large variety of cameras. Using this tool is largely self explanatory, but if you are looking for documentation it can be found on the @altaroca ’s blog site. As time allows, we will bring the documentation over to our readthedocs site. Volunteers to do this work are welcome.

ZoneMinder now has a telemetry deamon which collects information about your machine. This was done to learn how our user base uses ZoneMinder, the most common system size, choice of distro, cpu, memory, and a couple of other things. This will help us focus our efforts on what features get used the most. Since this was written in Perl, you can easily see for yourself what information is being sent. Note that this feature defaults to ON. If this is not what you want, then you can turn it off under Options. In a future release, we plan to include an install wizard, which will prompt the user about this feature.

Have you ever wished for the motion detection zones to be live, rather than a static image? Well they are now! Creating or modifying zones works exactly the same as before, but with the live stream running in the background. If you need to freeze the stream, there is a Pause button at the bottom of the window to do just that.

A new feature called Montage Review has been added. This can be thought of as a modified version of the original montage feature with features such as "scrubbing" through video. The Montage Review screen has received sufficient testing to be part of the release, but you should still treat this feature as experimental. We expect there to be additional fixes and refinements.

Change Log

v1.30.0 (2016-07-28)

Full Changelog

Merged pull requests:

v1.30.0-rc2 (2016-07-06)

Full Changelog

Merged pull requests:

v1.30.0-rc1 (2016-06-01)

Full Changelog

Merged pull requests:

Read more

The Day that Never Comes (RC2)

06 Jul 23:02

Choose a tag to compare

Pre-release

Important Changes!

This release has additional Perl dependencies associated with Onvif discovery and the telemetry daemon. If you are installing from a package, the package maintainer should take care of this for you.

As mentioned in the previous release notes, these features have been removed from the project:

  • Autotools – Build using cmake instead
  • Mobile Skin – Use a mobile app, such as zmNinja
  • XML Skin – Use the new API instead

Changes Included with RC2

  • An issue with the latest libjpeg-turbo 1.5.0 was discovered and fixed
  • Update Ubuntu and Debian documentation
  • Additional enhancements and fixes to zmonvif-probe
  • Zones were incorrectly reporting a size of 100% when they were smaller. This has been fixed.
  • Fixed an warning message from zmupdate.pl

New Features

Onvif discovery is now enabled by default. This features increases build time, but the benefit is auto-discovery of any Onvif compliant camera. Please note that this feature is still experimental. It has not been tested in a large environment or with a large variety of cameras. Using this tool is largely self explanatory, but if you are looking for documentation it can be found on the @altaroca ’s blog site. As time allows, we will bring the documentation over to our readthedocs site. Volunteers to do this work are welcome.

ZoneMinder now has a telemetry deamon which collects information about your machine. This was done to learn how our user base uses ZoneMinder, the most common system size, choice of distro, cpu, memory, and a couple of other things. This will help us focus our efforts on what features get used the most. Since this was written in Perl, you can easily see for yourself what information is being sent. Note that this feature defaults to ON. If this is not what you want, then you can turn it off under Options. In a future release, we plan to include an install wizard, which will prompt the user about this feature.

Have you ever wished for the motion detection zones to be live, rather than a static image? Well they are now! Creating or modifying zones works exactly the same as before, but with the live stream running in the background. If you need to freeze the stream, there is a Pause button at the bottom of the window to do just that.

Change Log

1.30.0 (2016-07-06)

Full Changelog

Merged pull requests:

v1.30.0-rc1 (2016-06-01)

Full Changelog

Merged pull requests:

Read more

The Day that Never Comes

01 Jun 01:01

Choose a tag to compare

Pre-release

Important Changes!

This release has additional Perl dependencies associated with Onvif discovery and the telemetry daemon. If you are installing from a package, the package maintainer should take care of this for you.

As mentioned in the previous release notes, these features have been removed from the project:

  • Autotools – Build using cmake instead
  • Mobile Skin – Use a mobile app, such as zmNinja
  • XML Skin – Use the new API instead

New Features

Onvif discovery is now enabled by default. This features increases build time, but the benefit is auto-discovery of any Onvif compliant camera. Please note that this feature is still experimental. It has not been tested in a large environment or with a large variety of cameras. Using this tool is largely self explanatory, but if you are looking for documentation it can be found on the @altaroca ’s blog site. As time allows, we will bring the documentation over to our readthedocs site. Volunteers to do this work are welcome.

ZoneMinder now has a telemetry deamon which collects information about your machine. This was done to learn how our user base uses ZoneMinder, the most common system size, choice of distro, cpu, memory, and a couple of other things. This will help us focus our efforts on what features get used the most. Since this was written in Perl, you can easily see for yourself what information is being sent. Note that this feature defaults to ON. If this is not what you want, then you can turn it off under Options. In a future release, we plan to include an install wizard, which will prompt the user about this feature.

Have you ever wished for the motion detection zones to be live, rather than a static image? Well they are now! Creating or modifying zones works exactly the same as before, but with the live stream running in the background. If you need to freeze the stream, there is a Pause button at the bottom of the window to do just that.

Change Log

1.30.0 (2016-05-31)

Full Changelog

Merged pull requests:

Read more

Fade to Black

03 Feb 19:15

Choose a tag to compare

In Memory of Emmanuel Papin

The ZoneMinder team would like to dedicate this release to Emmanuel Papin. Emmanuel was a significant contributor to this project and even went on to write a license plate plugin. You can view his work here: https://github.com/manupap1/libzoneminder-plugin-openalpr

It is with great sorrow that I must report his passing on August 19, 2015. He will be missed.

Important Feature Deprecation Announcement

The following features are planned to be removed from the ZoneMinder project in a future release:

  • Autotools – Build using cmake instead
  • Mobile Skin – Use a mobile app, such as zmNinja
  • XML Skin – Use the new API instead

Significant New Features and Changes

The ZoneMinder API! This is now the supported way for third party tools and apps to communicate with ZoneMinder. Please contact us if you find anything lacking in the API.

Referred to by us as MultiServer, ZoneMinder now supports the display of cameras attached to multiple ZoneMinder servers via a single web console. Previously, something similar could be done by adding a camera with a url that pointed to another ZoneMinder server. While this worked, it was inefficient, as processing and storage were duplicated across both servers. The new MultiServer feature accomplishes the same thing, but leaves the processing and storage to the server the camera is assigned to. This feature is targeted towards two environments. The first is an enterprise environment where scalability is desired. The second is what I'll call a micro-server environment, where each "server" is something small, such as a Raspberry Pi. Documentation for this new feature can be found under the /docs folder or at http://zoneminder.readthedocs.org .

The option USE_DEEP_STORAGE has been hidden. This option has been enabled as the default for many years. Recently, it was identified that turning this option off resulted in the near immediate deletion of events from the disk. Not good. Consequently, this option can no longer be modified from Options. In the unlikely event that you have a working system not already using deep storage, please contact us so we can get that enabled without loss of your data.

ZoneMinder no longer uses php short open tags.

ZoneMinder has limited ONVIF discovery support, but it must be enabled at build time. We could use someone to build and test this on different makes and models of cameras.

For those using Groups, this feature has been expanded into its own permission group for greater flexibility. This change has a default permission of none or off. Consequently, if you are using Groups, you will need to enable this under each user account.

The libvlc source type should be more stable now. We finally discovered the cause of a rather nasty fault and have fixed it.

Change Log

v1.29.0 (2016-02-03)

Full Changelog

Merged pull requests:

v1.29.0-rc2 (2016-01-05)

Full Changelog

Merged pull requests:

v1.29.0-rc1 (2016-01-01)

Full Changelog

Merged pull requests:

Read more