We are pleased to announce the latest stable release of Jellyfin, version 10.10.7! This minor release brings several bugfixes to improve your Jellyfin experience. THIS IS A SECURITY RELEASE - UPGRADIN

cross-posted from: https://aussie.zone/post/19146681

Jellyfin Server 10.10.7

Important Notes

Configurations behind a reverse proxy that did not explicitly configure trusted proxies will not work after this release. This was never a supported configuration, so please ensure you correct your configuration before upgrading. See the updated docs here for more information.

Security

  • Fix validation of API parameters to FFmpeg [GHSA-2c3c-r7gp-q32m], by @Shadowghost
  • Fix trusting forward headers if none are configured [GHSA-qcmf-gmhm-rfv9], by @JPVenson

Note: GHSAs will be published seven (7) days after this release.

General Changes

  • Fix regression where “Search for missing metadata” not handling cast having multiple roles [PR #13720], by @Lampan-git
  • Clone fallback audio tags instead of use ATL.Track.set [PR #13694], by @gnattu
  • Backport 10.11 API enum changes [PR #13835], by @nielsvanvelzen
  • Support more rating formats [PR #13639], by @IDisposable
  • Fix stackoverflow in MediaSourceCount [PR #12907], by @JPVenson
  • Upgrade LrcParser to 2025.228.1 [PR #13659], by @congerh
  • Include Role and SortOrder in MergePeople to fix “Search for missing metadata” [PR #13618], by @Lampan-git
  • Delete children from cache on parent delete [PR #13601], by @Bond-009
  • Fix overwrite of PremierDate with a year-only value [PR #13598], by @IDisposable
  • Wait for ffmpeg to exit on Windows before we try deleting the concat file [PR #13593], by @Bond-009
  • Fix 4K filtering when grouping movies into collections [PR #13594], by @theguymadmax
  • Remove empty ParentIndexNumber workaround [PR #13611], by @Shadowghost
  • Update dependency z440.atl.core to 6.20.0 [PR #13845], by @Shadowghost

Jellyfin Web 10.10.7

General Changes

  • Fix parsing minor version of Tizen [PR #6661], by @dmitrylyzo
  • Fix re-focusing on pause button when displaying OSD [PR #6510], by @dmitrylyzo
  • Fix skip button not displaying correctly with OSD [PR #6583], by @rlauuzo
  • Fix catalog plugin page not setting page title [PR #6570], by @nielsvanvelzen
  • kata1yst@sh.itjust.worksEnglish
    191·
    1 day ago

    Fuck no, ain’t nobody got time for that! My self hosted stack has 40+ services. I lock them to minor releases (where semvers are used), deploy blind with automation, and fire alerts when breakages occur, which is thankfully rarely.

    What you’re suggesting works for small, very carefully curated environments. I grew past that years ago and doubly so when I had kids.

      • kata1yst@sh.itjust.worksEnglish
        91·
        1 day ago

        The general list:

        1. Immich
        2. Jellyfin
        3. Plex (deprecated but kept around for my plexpass using friends)
        4. Internet Radio (custom container)
        5. PBS kids downloader (custom container)
        6. Lidarr
        7. Sonarr
        8. Mylar
        9. Radar
        10. Prowlarr
        11. Open-Webui
        12. QBittorrent
        13. Sabnzbd
        14. Navidrome
        15. Synapse
        16. Element
        17. Forgejo
        18. Tdarr
        19. Calibre
        20. Calibre Web
        21. Tautulli
        22. Bazarr
        23. Syncthing
        24. LazyLibrarian
        25. Linkwarden
        26. Mealie
        27. GlueTun
        28. Kopia
        29. Home Assistant
        30. Music Assistant
        31. Blocky
        32. FoundryVTT
        33. Wireguard
        34. ArchiveTeam Warrior
        35. Traefik
        36. Docspell
        37. Birdcage (though I’m slowly replacing this with my own bird sound server)
        38. Frigate
        39. FreshRSS
        40. Ntfy
        41. Samba
        42. SearxNG
        43. CouchDB for Obsidian Self-Hosted LiveSync

        With all the supporting services:

        Server:
 Containers: 76
  Running: 74
  Paused: 0
  Stopped: 2
 Images: 92