New Server/Web hotfix release: 10.8.13

New point release! Jellyfin 10.8.13 is available.

This release fixes two security bugs, one very serious, so please update your server as soon as you can.

See the forum post for more details:

https://forum.jellyfin.org/t-new-server-web-hotfix-release-10-8-13

EDIT 2023-11-29

FYI Due to a regression in our Jellyfin FFmpeg (https://github.com/jellyfin/jellyfin/issues/10654), we've pushed a new combined Docker image at version 10.8.13-1. All the server and web code is identical, it just has the updated jellyfin-ffmpeg package included. latest has been updated to match.

EDIT 2023-12-01

For anyone using the macOS .DMG (installer), we missed bundling ffprobe in the package.

A new build has been uploaded to our download page. Look for jellyfin_10.8.13-1.dmg.

50 points · 8 comments · view on lemmy.world

8 Comments

db2@sopuli.xyz · 7 pts · 2y (1 reply)

hotrix

Rick Sanchez

anthonylavado@lemmy.ca · 3 pts · 2y

Fixed, thanks.

notfromhere@lemmy.one · 7 pts · 2y

Mine is only accessible from VPN so I'm not worried.

slazer2au@lemmy.world · 3 pts · 2y (1 reply)

the details of these vulnerabilities will be made public on December 5th 2023

Why. Why would you release the deets on Dutch Christmas

JustEnoughDucks@feddit.nl · 3 pts · 2y

Not Sinterklaas Eve!! 😱

anthonylavado@lemmy.ca · 1 pts · 2y

FYI Due to a regression in our Jellyfin FFmpeg (https://github.com/jellyfin/jellyfin/issues/10654), we've pushed a new combined Docker image at version 10.8.13-1. All the server and web code is identical, it just has the updated jellyfin-ffmpeg package included. latest has been updated to match.

britneypeers@discuss.tchncs.de · 1 pts · 2y

And of course some seedbox providers are finding it difficult to roll out the upgrade. 😑

Cabowski@lemmy.ml · 1 pts · 2y

Thanks for posting!