Selfhosted

62103 readers

344 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

MODERATORS

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world

711

Jellyfin critical security update - This is not a joke (github.com)

submitted 5 months ago by Mubelotix@jlai.lu to c/selfhosted@lemmy.world

259 comments fedilink hide all child comments

(page 2) 50 comments

sorted by: hot top controversial new old

[–] Decronym@lemmy.decronym.xyz 8 points 5 months ago* (last edited 4 months ago)

Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I've seen in this thread:

Fewer Letters	More Letters
Git	Popular version control system, primarily for code
HTTP	Hypertext Transfer Protocol, the Web
IP	Internet Protocol
NFS	Network File System, a Unix-based file-sharing protocol known for performance and efficiency
Plex	Brand of media server package
RPi	Raspberry Pi brand of SBC
SBC	Single-Board Computer
SMB	Server Message Block protocol for file and printer sharing; Windows-native
SSH	Secure Shell for remote terminal access
SSL	Secure Sockets Layer, for transparent encryption
TLS	Transport Layer Security, supersedes SSL
VPN	Virtual Private Network
VPS	Virtual Private Server (opposed to shared hosting)
nginx	Popular HTTP server

12 acronyms in this thread; the most compressed thread commented on today has 13 acronyms.

[Thread #203 for this comm, first seen 1st Apr 2026, 09:50] [FAQ] [Full list] [Contact] [Source code]

[–] Wispy2891@lemmy.world 8 points 5 months ago

Thanks for this post, i would have updated mine next semester...

[–] roserose56@lemmy.zip 5 points 5 months ago (1 children)

Im on fedora and I have installed through dnf, no updates with the dnf update..... should I wait?

[–] gigachad@piefed.social 8 points 5 months ago (4 children)

I depends a bit on your threat model. If you have Jellyfin exposed to the internet I would shut it down immediately. If you are running locally and rely on it, let it run maybe? If behind a tailnet or some other VPN, I would deactivate it as well. If it is an Axios like vulnerability it may be possible your secrets are in danger, dependent on how well they are secured. Not a security expert, but I would handle this a little more conservative...

load more comments (4 replies)

[–] lmr0x61@lemmy.ml 5 points 5 months ago

The update rolled out perfectly for my Kubernetes setup (using the Docker image). 👍

load more comments