Jellyfin Versions Save

The Free Software Media System

v10.8.13

4 months ago

Jellyfin 10.8.13

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

N/A

Release Notes

  • NOTICE: The customizable FFmpeg binary path in the WebUI/API has been REMOVED for security reasons. Please see the corresponding blog post here for further details.

This bugfix release contains two GHSA security fixes; the details of these vulnerabilities will be released publicly on December 5th 2023. Please ensure you update your systems as soon as possible. Credit to @Kwstubbs (of GitHub Security Labs), @FredericLinn, and @mawalu for finding these.

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [3]

Note: Dependabot & Renovate automatic PRs are excluded from this list.

  • #10625 [@ilovepilav] Fix: Plugin Installed Alerts missing from Admin Dashboard #10620
  • GHSA-rr9h-w522-cvmr [@joshuaboniface] Remove the functionality of /System/MediaEncoder/Path
  • GHSA-866x-wj5j-2vf4 [@crobibero] Validate codec and container

jellyfin-web [3]

Note: Dependabot & Renovate automatic PRs are excluded from this list.

  • jellyfin/jellyfin-web#5019 [@joshuaboniface] Set FFmpeg path disabled
  • jellyfin/jellyfin-web#4993 [@rafma0] Remove FLAC Audio in Video Support for Tizen (Backport #4938)
  • jellyfin/jellyfin-web#4992 [@rafma0] Fix jittering in emby-checkbox (Backport #4929)

v10.8.12

5 months ago

Jellyfin 10.8.12

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

N/A

Release Notes

N/A

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [5]

Note: Dependabot & Renovate automatic PRs are excluded from this list.

  • #10528 [@nyanmisaka] Fix mismatched intel VAAPI UMD/KMD - Backport #10451
  • #10514 [@Bond-009] Update SkiaSharp (v2.88.6) and BlurHashSharp (v1.3.1) Reverted due to SEGV on access
  • #10487 [@thornbill] Fix scaleFactor limit - Backport #9738
  • #10454 [@Shadowghost] Add MALLOC_TRIM_THRESHOLD_ to default ENV
  • #10406 [@thornbill] Fix playlist listings

jellyfin-web [6]

Note: Dependabot & Renovate automatic PRs are excluded from this list.

  • jellyfin/jellyfin-web#4912 [@dmitrylyzo] Fix imports
  • jellyfin/jellyfin-web#4893 [@thornbill] Change Subtitle Sync slider to go from -300 to 300 - Backport jellyfin/jellyfin-web#4754
  • jellyfin/jellyfin-web#4892 [@thornbill] Fix language/subtitle switcher when using gamepad - Backport jellyfin/jellyfin-web#4860
  • jellyfin/jellyfin-web#4837 [@dmitrylyzo] Fix playing empty item set
  • jellyfin/jellyfin-web#4813 [@dmitrylyzo] Handle pressing Enter to finish keyboard dragging of slider (Backport jellyfin/jellyfin-web#4805)
  • jellyfin/jellyfin-web#4797 [@Mauroq] Remove H264 10bit support on Samsung TV (Tizen)

v10.8.11

6 months ago

Jellyfin 10.8.11

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

N/A

Release Notes

N/A

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [6]

Note: Dependabot automatic PRs are excluded from this list.

  • #9952 [@Bond-009] Backport fix for #9503
  • #9928 [@nyanmisaka] Disable global_header on AMD VA-API encoder
  • #9916 [@Bond-009] Don't ignore parentId for playlists (backport #9909)
  • #9723 [@dmitrylyzo] Fix multiple codec checking in CodecProfiles conditions
  • #10265 [@Shadowghost] Backport #10173
  • #10151 [@nyanmisaka] Fix performance loss of QSV HDR tone-mapping on Windows

jellyfin-web [14]

Note: Dependabot automatic PRs are excluded from this list.

  • jellyfin/jellyfin-web#4758 [@dmitrylyzo] Fix slider step
  • jellyfin/jellyfin-web#4757 [@dmitrylyzo] Remove Dolby Vision support on Samsung TV (Tizen)
  • jellyfin/jellyfin-web#4709 [@thornbill] Fix scheduled task time limit key
  • jellyfin/jellyfin-web#4688 [@dmitrylyzo] Disable ALAC on MacOS in non-Safari browsers
  • jellyfin/jellyfin-web#4685 [@hurani] Backport pull request #4171 to release 10.8.z
  • jellyfin/jellyfin-web#4657 [@thornbill] Fix xss in custom subtitles element
  • jellyfin/jellyfin-web#4654 [@joshuaboniface] Add confirmation for 3rd party repos
  • jellyfin/jellyfin-web#4632 [@dmitrylyzo] Improve keyboard control
  • jellyfin/jellyfin-web#4628 [@dmitrylyzo] Fix initial state of volume slider
  • jellyfin/jellyfin-web#4627 [@dmitrylyzo] Fix overlap of slider bubble
  • jellyfin/jellyfin-web#4591 [@thornbill] Fix QuickConnect code not displaying in Spanish
  • jellyfin/jellyfin-web#4589 [@thornbill] Fix xss in api key page
  • jellyfin/jellyfin-web#4561 [@dmitrylyzo] Fix bottom video controls don't auto-hide
  • jellyfin/jellyfin-web#4553 [@dmitrylyzo] Unhide PlayNextEpisodeAutomatically on TV

v10.8.10

1 year ago

Jellyfin 10.8.10

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

  • CRITICAL SECURITY ADVISORY: GHSA-9p5f-5x8v-x65m and GHSA-89hp-h43h-r5pq can be combined to allow remote code execution for any authenticated Jellyfin user including non-admin users. While the particular execution mechanism of the former dates to the 10.8.0 release, the latter was present for all Jellyfin releases before this point. It is thus absolutely critical for all Jellyfin administrators, regardless of version, to upgrade to this version if they allow any untrusted users and/or expose their instance to the Internet.

Release Notes

N/A

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [12]

Note: Dependabot automatic PRs are excluded from this list.

  • GHSA-9p5f-5x8v-x65m [@daullmer] Throw exception on path traversal in WriteDocumentAsync
  • #9671 [@nyanmisaka] Fix the canvas size for DVBSUB and DVDSUB subtitles
  • #9642 [@nyanmisaka] Fix the brightness of VPP tonemap and add the tonemap mode
  • #9538 [@TheTyrius] Fix nvenc preset order
  • #9430 [@nyanmisaka] Fix Live TV hardware decoding
  • #9422 [@nyanmisaka] Fix stream map when using filter_complex with unlabeled output
  • #9411 [@nyanmisaka] Fix codec checking in CodecProfiles conditions
  • #9409 [@Shadowghost] Multiple HLS codec and bitrate fixes (10.8.z)
  • #9391 [@nyanmisaka] Fix H.264 baseline hwaccel and enable enhanced Nvdec by default
  • #9355 [@nyanmisaka] Some VAAPI VPP and OpenCL fixes
  • #9351 [@Shadowghost] Fix EqualsAny condition check for int and double

jellyfin-web [11]

Note: Dependabot automatic PRs are excluded from this list.

  • GHSA-89hp-h43h-r5pq [@iwalton3] Escape device id in raw HTML
  • jellyfin/jellyfin-web#4492 [@nyanmisaka] Add the tonemap mode options
  • jellyfin/jellyfin-web#4487 [@thornbill] Fix dead documentation link
  • jellyfin/jellyfin-web#4395 [@thornbill] Fix installed plugin version html
  • jellyfin/jellyfin-web#4385 [@nyanmisaka] Drop progressive transcoding in web client
  • jellyfin/jellyfin-web#4362 [@dmitrylyzo] Fix subtitle offset reset when seeking progressive stream
  • jellyfin/jellyfin-web#4356 [@dmitrylyzo] Babelify @jellyfin/libass-wasm
  • jellyfin/jellyfin-web#4330 [@dmitrylyzo] Fix navigation for some types of INPUT
  • jellyfin/jellyfin-web#4312 [@dmitrylyzo] Backport PR #4150 to 10.8.z branch
  • jellyfin/jellyfin-web#4310 [@jsayol] Backport PR #4147 to 10.8.z branch

v10.8.9

1 year ago

Jellyfin 10.8.9

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

N/A

Release Notes

N/A

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [10]

Note: Dependabot automatic PRs are excluded from this list.

  • #9145 [@nyanmisaka] Fix PGS position issue in sw decoding #8602
  • #9130 [@Shadowghost] Fix API access permissions for LiveTV and downloads
  • #9112 [@nyanmisaka] Backport the ffmpeg link fix (#8901) to 10.8.z
  • #9092 [@dmitrylyzo] Don't add additional entries if HEVC encoding is disabled
  • #9060 [@thornbill] Disable splash screen image by default
  • #9051 [@dmitrylyzo] Fix transcode reasons
  • #9050 [@nyanmisaka] Update workaround for i915 hang in linux 5.18 to 6.1.3
  • #9049 [@Shadowghost] Add more codecs requiring ffmpeg strict -2
  • #9020 [@Bond-009] Backport 8726: Fix incorrect starting offset of buffer span in CheckTunerAvailability
  • #9009 [@dmitrylyzo] Fix secondary audio

jellyfin-web [9]

Note: Dependabot automatic PRs are excluded from this list.

  • jellyfin/jellyfin-web#4288 [@dmitrylyzo] Fix loading Spanish (Latin America) (es-419)
  • jellyfin/jellyfin-web#4274 [@dmitrylyzo] Fix back action on Hisense TV
  • jellyfin/jellyfin-web#4269 [@thornbill] Fix XSS vulnerability in plugin repo pages
  • jellyfin/jellyfin-web#4267 [@dmitrylyzo] Fix AudioContext limit exceeded
  • jellyfin/jellyfin-web#4263 [@dmitrylyzo] Fix change audio track
  • jellyfin/jellyfin-web#4243 [@dmitrylyzo] Fix HTML escaping in MediaSession and on remote page
  • jellyfin/jellyfin-web#4240 [@dmitrylyzo] Fix detection of SecondaryAudio support
  • jellyfin/jellyfin-web#4238 [@thornbill] Fix XSS vulnerability in router
  • jellyfin/jellyfin-web#4182 [@nyanmisaka] Fix the progressive mp4 transcoding profile

v10.8.8

1 year ago

Jellyfin 10.8.8

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

N/A

Release Notes

N/A

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [1]

Note: Dependabot automatic PRs are excluded from this list.

  • #8753 [@thornbill] Fix items access backport

jellyfin-web [2]

Note: Dependabot automatic PRs are excluded from this list.

  • jellyfin/jellyfin-web#4172 [@thornbill] Fix item details banner image alignment
  • jellyfin/jellyfin-web#4166 [@dmitrylyzo] Fix keyboard navigation for INPUT and TEXTAREA

v10.8.7

1 year ago

Jellyfin 10.8.7

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

N/A

Release Notes

N/A

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [3]

Note: Dependabot automatic PRs are excluded from this list.

  • #8667 [@daullmer] Enable OMDB plot for non-English languages as fallback
  • #8662 [@cvium] fix: use a combination of ParentIndexNumber and IndexNumber to determine next up episodes
  • #8649 [@nielsvanvelzen] Un-revert "Merge pull request #8298 from lomion0815/fix-data-stream"

jellyfin-web [0]

Note: Dependabot automatic PRs are excluded from this list.

N/A

v10.8.6

1 year ago

Jellyfin 10.8.6

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

N/A

Release Notes

N/A

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [12]

Note: Dependabot automatic PRs are excluded from this list.

  • #8620 [@nyanmisaka] Fix the DG2 HDR TM tearing issue on Windows
  • #8611 [@nielsvanvelzen] Fix TranscodeReasons type in OpenAPI output
  • #8609 [@anthonylavado] Use Token for SchedulesDirect Images and Image Index
  • #8608 [@cvium] Add index for DateCreated on ActivityLogs
  • #8600 [@Shadowghost] Prevent host lookup on GetSmartUrl for HTTP requests
  • #8523 [@Gylesie] Fallback only to the current time when marking item as watched
  • #8517 [@cvium] Backport #8335 to release-10.8.z
  • #8516 [@cvium] fix: kill ffprobe if keyframe parsing fails
  • #8501 [@cvium] fix: set MinIndexNumber for the next up query
  • #8499 [@cvium] chore: add Basque to the list of localization options
  • #8480 [@thornbill] Revert "Merge pull request #8298 from lomion0815/fix-data-stream"
  • #8411 [@Maxr1998] Allow direct play even if no audio stream is available

jellyfin-web [7]

Note: Dependabot automatic PRs are excluded from this list.

  • jellyfin/jellyfin-web#4117 [@thornbill] Backport PR #4094 to 10.8 release
  • jellyfin/jellyfin-web#4089 [@dmitrylyzo] Fix double escape HTML
  • jellyfin/jellyfin-web#4069 [@peterspenler] Fix images sometimes not un-blurring
  • jellyfin/jellyfin-web#4047 [@thornbill] Change settings menu item name to "Euskara"
  • jellyfin/jellyfin-web#4039 [@thornbill] Fix card cropping on item details page
  • jellyfin/jellyfin-web#4005 [@dmitrylyzo] Fix locale with suffix
  • jellyfin/jellyfin-web#4004 [@cvium] chore: add Basque display language option

v10.8.5

1 year ago

Jellyfin 10.8.5

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

N/A

Release Notes

N/A

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [10]

Note: Dependabot & Renovate automatic PRs are excluded from this list.

  • #8433 [@crobibero] Update to dotnet 6.0.9
  • #8399 [@cvium] Respect visibility for people items (rebased)
  • #8348 [@cvium] Revert "Revert "refactor: use season number and episode number for NextUp ordering instead of SortName""
  • #8327 [@RealGreenDragon] Increased (really) subtitle extraction timeout to 30 min (10.8.z back-port)
  • #8321 [@strugee] Fix systemd not breaking whitespace in env vars
  • #8298 [@lomion0815] Added handling of streams of type "data"
  • #8280 [@thornbill] Fix ffmpeg analyze duration env var taking priority over media source
  • #8214 [@nielsvanvelzen] Make userId truly optional in UniversalAudioController
  • #8213 [@nyanmisaka] Fix high single thread usage in throttler
  • #8189 [@lukefor] Fix GetItems IndexOutOfRangeException when IDs do not exist

jellyfin-web [4]

Note: Dependabot & Renovate automatic PRs are excluded from this list.

  • jellyfin/jellyfin-web#3878 [@thornbill] Fix sdk imports to improve build size
  • jellyfin/jellyfin-web#3877 [@Callum17] Fix itemcontextmenu fails to update for items with no image metadata
  • jellyfin/jellyfin-web#3849 [@dmitrylyzo] Fix unexpected cursor hiding
  • jellyfin/jellyfin-web#3848 [@dmitrylyzo] Fix idle function call

v10.8.4

1 year ago

Jellyfin 10.8.4

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

N/A

Release Notes

N/A

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [6]

Note: Dependabot automatic PRs are excluded from this list.

  • #8257 [@joshuaboniface] Use separate args for dotnet publish commands
  • #8234 [@crobibero] update to dotnet 6.0.8
  • #8219 [@nyanmisaka] Move Fedora service hardening options to override config
  • #8212 [@SenorSmartyPants] Add resolution text for 384 sized video
  • #8209 [@Shadowghost] Fix series query including missing episodes when it should not
  • #8182 [@Shadowghost] Extract external subs from container before determining characterset

jellyfin-web [1]

Note: Dependabot automatic PRs are excluded from this list.

  • jellyfin/jellyfin-web#3789 [@thornbill] Fix XSS in card aria labels