The Memory Remains 1.36.13

Changes since 1.36.12

• Change a warning to a Debug when getting the latest image using zmu
• Updates to Axis PTZ script adding support for getting details from Path and fixing support for older cameras
• Fix for update script for 1.35.25 and DayEventDiskSpace
• include user and function error message about insufficient permissions. Will make it easier to figure out who tried what.
• Fix for crash in CSRF
• Fix missing text-right align on Port/Path labels. Set step to 1 for Port
• Remote RTSP camera.
• Fix fail to get Sources in Remote RTSP
• Fix compilation with ffmpeg 5.0
• Implement filter limits. Which go before pagination/advanced search limits
• Fix do_debian_package build script for version = CURRENT style versioning.
• Implement a check on change of language. Make sure that the specified language file exists. Reports errors to UI
• Test for valid language file when saving user.
• add styling for errors reported to ui and include the errors on options view
• Fix zmu device probing
• Change title of v4l settings button to give an indication WHY it isn't enabled
• Convert Fatal()s to Errors() in image viewing. Maybe Fixes [#3426]
• Include EndDateTimeShort in event stats
• Handle empty endtime (in progress event) more gracefully. If there is a next event just jump to it.
• locking fixes that caused hung zmu and zms processes
• Set mysql character set to utf8 explicitly to support chinese characters (or other special characters).
• escape html in Storage names
• fix auth'd user information being saved to session before switching session id's leaving bogus authenticated user in previous session.
• Fix potential XSS from Username
• Add a pattern filter for Usernames, Group Names and Storage Names to prevent invalid characters and XSS
• Add NOT IN case to filters. Also, fix bad SQL when value evals to false. Test for empty string instead. Fixes [#3425]
• Fix CURL monitors
• Fix event view corruption caused by changes to the sendfile system call.Fixes [#3437]
• Add useful title to frame image telling us which we are looking at
• Allow empty sort field when listing events
• Fix error in PTZ control code when no speed has been defined.
• Allow editing of admin user.
• Add more of the resulting SQL to the filter debug modal
• Make filter debug modal work on non-saved filter
• improvements to Event module implementing a Server() function which figures out which Server likely has the video. Use it to remove duplicate logic
• improvements to Zone module Add numCoords, Coords, Area, AlarmRGB to Zone object. Also add Points(), AreaCoords, svg_polygon
• Implement zm_setcookie to simplify setting cookies, set samesite, deal with older php etc
• add loading=lazy to most images to improve page loading
• Don't both running zmu if monitor Function is set to None
• Add mp4 as an option for generated video and make it the default instead of avi
• Set some new more sensible defaults for various settings including logging, navbar refreshes, full page refreshes and ajax timeouts
• Big update to Control.pm
• Fix for Netcat PTZ using x=0 y=0 for autostop in addition to old stop movement code
• Implement reboot and ping methods for Trendnet PTZ Control
• rough in Url, UrlToZMS PathToZMS PathToIndex, UrlToIndex UrlToApi PathToApi in SERver object
• reduce debug logging in zmaudit

There are fixes in here for 3 vulnerabilities:
Remote code execution by specifying an invalid language found by Krastanoel.
Stored XSS in Username field found by Tester Tester
Session Fixation problem found by Tester Tester.

Full Changelog: 1.36.12...1.36.13

The Memory Remains 1.36.12

Changes since 1.36.11

• Allow NOW or CURRENT for PACKAGE_VERSION similar to snapshot in do_debian_package.sh
• Fix lack of scaling when TIMESTAMP_ON_CAPTURE is off
• Fix deleting from event view.
• Pause streaming before delete to prevent errors being logged due to missing files
• documentation fixes
• Fix NULL and add special 0 case for Storage area specification in filter
• Handle bug where a value of '' will prevent special case handling in filter rules
• Allow '' to mean NULL when specifying Storage Area
• include monitor dimensions when logging about zone mismatch
• Remove text-nowrap from cause/notes column
• If we are starting a process that is waiting to term, mark it to get started by the reaper. Fixes case where zmdc thought the process was still running and so didn't start it. We never noticed because zmwatch would eventually notice. The result is instant restart.
• kill the background timer when switching to history so that we don't cause a javascript error
• Detect group hierarchy loops and break them.
• clear the monitors array before terminating log. Might fix zmu hangs
• Add auth relay to status ajax request fixing logged 404 error
• Wait for closeEvent thread to finish. Fixes unfinished event when zmc told to restart
• Fix libvnc_camera so that we don't crash on Reload
• Fix build on FreeBSD/armv7

1.36.12

Full Changelog

The Memory Remains 1.36.11

Changes since 1.36.10

• fixes to do_debian_package.sh
• Fix Event count subsitutions in emails
• Fix locking in CopyTo and MoveTo filter functions
• Fix super fast playback after switch to next event
• Allow orderings set by filters to work in event listing. Fixes [#3348]
• Handle auth to mysql problems during postinst more gracefully
• fix validInt to take negative integers. Introduce validCardinal to handle positive integers
• Put back generate video button in event view
• Add Debian 11 (Bullseye) install docs
• Italian translation updates
• set rows on email body textarea
• Restore download buttons behaviour on event view. It should just download the mp4.
• fix javascript error if download button doesn't exist because there is no mp4
• Set Locale for time to en_GB.utf8, changed STRF_FMT_DATETIME_SHORTER to %x which is locale aware short date
• Fix filters not deleting
• Make delete dialog disappear on success. Fixes [#3377]
• Set character set as utf8 when connect to mysql to avoid mistakes when there are Chinese characters in storage path.
• Fix event listing when not paginated.
• Fix logged errors when av_write_trailer returns a positive value
• alert error message when an error is returned instead of rows in events list ajax
• Report error if sql fails. Add check for access to specific event in events listing
• Set zm_terminate on crash so that other threads exit instead of continuing
• Don't exit(0) on QUIT in zms. Instead set zm_terminate=true so that all the cleanup routines run. Fixes swap files not being deleted.
• fix build on posix/musl
• Add privacy to options tabs so we can get back to it.
• Send all stats rows instead of just 1 so that you can view stats for all zones
• implement UrlToZMS in Monitor.php
• implement Event::canEdit
• When saving v4l settings redirect back to watch instead of console.
• Add title to Download button so you can see the expected filename.

1.36.11

Full Changelog

The Memory Remains 1.36.10

Changes since 1.36.9

• Set shm->valid to false on disconnect. Fix linked monitors stopping after a while
• Documentation update regard WEB_TITLE
• Corrections to filters when using row locks. An error would commit, ending the transaction and locks.
• Fix monitor type labels by adding an Unknown for entry 0. Implement Function_Strings.
• Fix decoding_enabled not being recalculated correctly because we havn't loaded savejpegs or videowriter yet.
• Fix logic ordering in db 1.35.14 update that moves columns from Monitor table to Monitor_Status
• set vertical-align:top on monitor edit labels
• We now delete a non-keyframe from head instead of waiting in capture. This should fix lockups when MaxImageBufferCount is too low.

1.36.10

Full Changelog

The Memory Remains 1.36.9

Changes since 1.36.8

• fixes to do_debian_package.sh
• Test for existence of AutoEmail and AutoMessage. Fixes [#3369] issue 2.
• Improve debug logging of packetqueue cleaning
• Improvements to export. Fix tar -v, should be tar --version. make table width:100% and iframe height 100%. Always show thumbnail of video. Show Id of event if no other links. generate Images frame content event if no jpegs but there is an mp4. Set timeout to infinity for generating export. Provide more feedback if it breaks. Fix ticker.
• Fix loading logging importance adjustment.
• always correct decoding_enable, as zms needs to know it's correct value.
• Change commands used to set and goto presets in Floureon PTZ. Fixes [#3371]
• Improve filter edit layout: Put actions and options in a div, remove hr's and style the resulting div to have the borders and clearing required. Make email options 100%
• Only record when in modect or nodect. Linked monitors would cause a monitor in monitor mode to record
• update man pages and typos

1.36.9

Full Changelog

The Memory Remains 1.36.8

Changes since 1.36.7

• Fix js error in montage review when using scaled mode. Fixes [#3351]
• French translation updates
• fixes to packetqueue locking which should reduce RAM consumption in certain cases.
• Don't crash in rstp server when unable to create source
• Fixed a bug in Image::Buffer that would return the wrong location in the image if the image had > 1 channels (and if the request were for x > 0)
• remove useless commit in zmfilter.pl causing logged warnings
• fix width=0px causing empty looking montage
• Handle when SERVER['HTTP_HOST'] is not set
• allow values != -1 in setting Brightness, Contrast, etc in zmu
• fix zmu in verbose mode reporting change in brightness when contrast was specified

The biggest things here are the montage fix and the locking/ram fixes.

1.36.8

Full Changelog

The Memory Remains 1.36.7

Changes since 1.36.6

• Add an example fail2ban rule
• Email sending: fix html emails when using ZM_NEW_MAIL_MODULES. Improve debugging reduce Info logging
• fix bug in zms causing failed image loading in zmNinja and anywhere a low maxfps was specified
• Updated italian translation
• add missing calls to update_function_pointers allowing SSE Blend functions to be used. Significant improvement to cpu use when doing motion detection.

1.36.7

Full Changelog

The Memory Remains 1.36.6

Changes since 1.36.5

• Fix Archive FTP .zip filename not including monitor name. Fixes [#3304]
• Correct the size of the Longitude and Latitude fields. Fixes [\3311]
• Optimise API by optionally not loading the Frames from db table
• Handle the case when the monitor doesn't exist more gracefully and not crash. Fixes [#3316]
• Fix for export zip crashing due to including non existent files. Fixes [#3313]
• fix build for bionic due to missing libjwt-gnutls-dev
• fix linked monitors not working after a random period of time
• fix unimplemented viewing fps in live view.
• fix fps display in live view when paused
• Update Dark skin to look better
• fix styling of shutdown button making it invisible
• Support specifying the export filename by passing the export_root
• Turn on export functionality for snapshots
• fix save button on monitorprobe
• zmu may still output results even if it encounters errors, so continue even if we have an error return status from zmu.
• Allow specifying export Structure to get a flat zip
• Fix deleting snapshots
• When locking, use the results to reload the object fields fresh as they may have changed since the object was loaded. Fixes Archived events losing their endtime.
• add export and download functions in snapshot.
• Add defaults for AutoMoveTo and AutoCopyTo so that we don't get false changes when saving filters. Fix redirect after save. Re-null the Id of the filter object after temp execute so that we don't reference a no longer existing filter.
• Change monitor->canView semantics so that a specified monitorId trumps the Monitors:None setting. This is so that the console can be hidden, but the group dropdown still gets populated.
• When the selected layout is not freeform, calculate the ratio of computed size to stream source size to calculate a value for scale. Should reduce cpu use and bandwidth from zms
• Fixed 'Call to undefined function Error()' in control_functions.php
• Only show thumbnail if Function is != None
• add autoplay tag. Fixes [#3343]
• Don't use AUTH_HASH_IPS when talking to zmu as it doesn't support that at this time.
• Fix PTZ Diagonal cmds. Fixes [#3300]
• add getMonitorStatuses function to return string values for status numbers
• Fix building SQL for ExistsInFileSystem PostCondition.
• Fix how we turn the rows into Event objects.
• Fix value handling in ExistsInFileSystem post condition.
• Add a 5 second timeout when setting suspending/resuming motion detection.Log errors appropriately
• If we fail to suspend/resume, assume we need to disconnect/reconnect to the mmap
• Fix usage summary in zmu, as there must be a space between -u and dbuser, etc
• documentation and readme updates, fixing dead links
• support for building with gitlab CI
• add support for ubuntu impish
• fixes in quoting default values in perl Monitor and Zone objects.
• Return early if packetqueue is empty instead of getting the lock. Return early in clear() if we are not initialised
• Make failure to resolve http remote monitors non fatal
• Fix errors due to not stopping the dbQueue in zmu. Fix crash when querying v4l devices
• LocalCamera: Add a missing include to fix FreeBSD build Fixes [#3330]
• fix errors reported during adding monitors due to missing Importance member in Monitor object
• Only suspend/resume motion detection if the monitor is doing motion detection

1.36.6

Full Changelog

The Memory Remains 1.36.5

Changes since 1.36.4

• fix logout modal not appearing when too many sessions in sessions table
• fix remote monitors not restarting when Function = None leaving them running.
• fixes to onvif zooming [#3295]
• fix EndTime handling in Filters
• fix sorting of in progress events when sorting by EndDateTime
• Allow cakephp cache engine to be set during build
• remove code to control analysis fps that sleeps as it is no longer relevent. Should help memory use.

1.36.4

Full Changelog

The Memory Remains 1.36.4

Changes since 1.36.3

• Fix revision of CRUD in submodule
• Fix problems in zmstats.pl: Fix log deletion only ever deleting 100 entries when it should delete more in a loop. Add deleting more than 100 sessions. Fix loop not terminating on Ctrl-C
• Add samesite when setting cookie for skin and css
• Default to UTC when no timezone set so that montagereview continues working. Fixes [#3274]
• Fix bug in onvifprobe when specifying interface
• Remove 25x and 50x rate options in event view. Browsers do not support them. Add 16x which is the max. Fixes [#3284]
• fix crash when in alert state with no event
• fix some queue clearing cases that cause hangs
• improve efficiency of getting packets from queue in decode thread.
• fix timestamping not being done on all recorded frames
• Fix renaming events [#3265]

1.36.4

Full Changelog