Skip to content

Releases: jellyfin/jellyfin

10.8.13

29 Nov 03:49
Compare
Choose a tag to compare

Jellyfin 10.8.13

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

N/A

Release Notes

  • NOTICE: The customizable FFmpeg binary path in the WebUI/API has been REMOVED for security reasons. Please see the corresponding blog post here for further details.

This bugfix release contains two GHSA security fixes; the details of these vulnerabilities will be released publicly on December 5th 2023. Please ensure you update your systems as soon as possible. Credit to @Kwstubbs (of GitHub Security Labs), @FredericLinn, and @mawalu for finding these.

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [3]

Note: Dependabot & Renovate automatic PRs are excluded from this list.

jellyfin-web [3]

Note: Dependabot & Renovate automatic PRs are excluded from this list.

10.8.12

05 Nov 17:53
Compare
Choose a tag to compare

Jellyfin 10.8.12

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

N/A

Release Notes

N/A

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [5]

Note: Dependabot & Renovate automatic PRs are excluded from this list.

jellyfin-web [6]

Note: Dependabot & Renovate automatic PRs are excluded from this list.

10.8.11

24 Sep 02:27
Compare
Choose a tag to compare

Jellyfin 10.8.11

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

N/A

Release Notes

N/A

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [6]

Note: Dependabot automatic PRs are excluded from this list.

jellyfin-web [14]

Note: Dependabot automatic PRs are excluded from this list.

10.8.10

23 Apr 15:40
Compare
Choose a tag to compare

Jellyfin 10.8.10

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

  • CRITICAL SECURITY ADVISORY: GHSA-9p5f-5x8v-x65m and GHSA-89hp-h43h-r5pq can be combined to allow remote code execution for any authenticated Jellyfin user including non-admin users. While the particular execution mechanism of the former dates to the 10.8.0 release, the latter was present for all Jellyfin releases before this point. It is thus absolutely critical for all Jellyfin administrators, regardless of version, to upgrade to this version if they allow any untrusted users and/or expose their instance to the Internet.

Release Notes

N/A

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [12]

Note: Dependabot automatic PRs are excluded from this list.

jellyfin-web [11]

Note: Dependabot automatic PRs are excluded from this list.

10.8.9

22 Jan 19:29
Compare
Choose a tag to compare

Jellyfin 10.8.9

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

N/A

Release Notes

N/A

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [10]

Note: Dependabot automatic PRs are excluded from this list.

jellyfin-web [9]

Note: Dependabot automatic PRs are excluded from this list.

10.8.8

29 Nov 19:00
Compare
Choose a tag to compare

Jellyfin 10.8.8

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

N/A

Release Notes

N/A

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [1]

Note: Dependabot automatic PRs are excluded from this list.

jellyfin-web [2]

Note: Dependabot automatic PRs are excluded from this list.

10.8.7

01 Nov 03:23
Compare
Choose a tag to compare

Jellyfin 10.8.7

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

N/A

Release Notes

N/A

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [3]

Note: Dependabot automatic PRs are excluded from this list.

  • #8667 [@daullmer] Enable OMDB plot for non-English languages as fallback
  • #8662 [@cvium] fix: use a combination of ParentIndexNumber and IndexNumber to determine next up episodes
  • #8649 [@nielsvanvelzen] Un-revert "Merge pull request #8298 from lomion0815/fix-data-stream"

jellyfin-web [0]

Note: Dependabot automatic PRs are excluded from this list.

N/A

10.8.6

29 Oct 03:00
Compare
Choose a tag to compare

Jellyfin 10.8.6

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

N/A

Release Notes

N/A

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [12]

Note: Dependabot automatic PRs are excluded from this list.

jellyfin-web [7]

Note: Dependabot automatic PRs are excluded from this list.

10.8.5

25 Sep 02:24
Compare
Choose a tag to compare

Jellyfin 10.8.5

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

N/A

Release Notes

N/A

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [10]

Note: Dependabot & Renovate automatic PRs are excluded from this list.

  • #8433 [@crobibero] Update to dotnet 6.0.9
  • #8399 [@cvium] Respect visibility for people items (rebased)
  • #8348 [@cvium] Revert "Revert "refactor: use season number and episode number for NextUp ordering instead of SortName""
  • #8327 [@RealGreenDragon] Increased (really) subtitle extraction timeout to 30 min (10.8.z back-port)
  • #8321 [@strugee] Fix systemd not breaking whitespace in env vars
  • #8298 [@lomion0815] Added handling of streams of type "data"
  • #8280 [@thornbill] Fix ffmpeg analyze duration env var taking priority over media source
  • #8214 [@nielsvanvelzen] Make userId truly optional in UniversalAudioController
  • #8213 [@nyanmisaka] Fix high single thread usage in throttler
  • #8189 [@lukefor] Fix GetItems IndexOutOfRangeException when IDs do not exist

jellyfin-web [4]

Note: Dependabot & Renovate automatic PRs are excluded from this list.

10.8.4

14 Aug 02:06
Compare
Choose a tag to compare

Jellyfin 10.8.4

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

N/A

Release Notes

N/A

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [6]

Note: Dependabot automatic PRs are excluded from this list.

jellyfin-web [1]

Note: Dependabot automatic PRs are excluded from this list.