New point release! Jellyfin 10.8.13 is available.
This release fixes two security bugs, one very serious, so please update your server as soon as you can.
See the forum post for more details:
https://forum.jellyfin.org/t-new-server-web-hotfix-release-10-8-13
EDIT 2023-11-29
FYI
Due to a regression in our Jellyfin FFmpeg (https://github.com/jellyfin/jellyfin/issues/10654), we’ve pushed a new combined Docker image at version 10.8.13-1. All the server and web code is identical, it just has the updated jellyfin-ffmpeg package included. latest has been updated to match.
EDIT 2023-12-01
For anyone using the macOS .DMG (installer), we missed bundling ffprobe in the package.
A new build has been uploaded to our download page. Look for jellyfin_10.8.13-1.dmg.
hotrix
Fixed, thanks.
Mine is only accessible from VPN so I’m not worried.
the details of these vulnerabilities will be made public on December 5th 2023
Why. Why would you release the deets on Dutch Christmas
Not Sinterklaas Eve!! 😱
And of course some seedbox providers are finding it difficult to roll out the upgrade. 😑
Thanks for posting!
FYI Due to a regression in our Jellyfin FFmpeg (https://github.com/jellyfin/jellyfin/issues/10654), we’ve pushed a new combined Docker image at version
10.8.13-1. All the server and web code is identical, it just has the updated jellyfin-ffmpeg package included.latesthas been updated to match.
