We are pleased to announce the latest stable release of Jellyfin, version 10.10.7! This minor release brings several bugfixes to improve your Jellyfin experience. THIS IS A SECURITY RELEASE - UPGRADIN
Configurations behind a reverse proxy that did not explicitly configure trusted proxies will not work after this release. This was never a supported configuration, so please ensure you correct your configuration before upgrading. See the updated docs here for more information.
Security
Fix validation of API parameters to FFmpeg [GHSA-2c3c-r7gp-q32m], by @Shadowghost
Fix trusting forward headers if none are configured [GHSA-qcmf-gmhm-rfv9], by @JPVenson
Note: GHSAs will be published seven (7) days after this release.
General Changes
Fix regression where "Search for missing metadata" not handling cast having multiple roles [PR #13720], by @Lampan-git
Clone fallback audio tags instead of use ATL.Track.set [PR #13694], by @gnattu
Backport 10.11 API enum changes [PR #13835], by @nielsvanvelzen
Support more rating formats [PR #13639], by @IDisposable
Fix stackoverflow in MediaSourceCount [PR #12907], by @JPVenson
Upgrade LrcParser to 2025.228.1 [PR #13659], by @congerh
Include Role and SortOrder in MergePeople to fix "Search for missing metadata" [PR #13618], by @Lampan-git
Delete children from cache on parent delete [PR #13601], by @Bond-009
Fix overwrite of PremierDate with a year-only value [PR #13598], by @IDisposable
Wait for ffmpeg to exit on Windows before we try deleting the concat file [PR #13593], by @Bond-009
Fix 4K filtering when grouping movies into collections [PR #13594], by @theguymadmax
Remove empty ParentIndexNumber workaround [PR #13611], by @Shadowghost
Update dependency z440.atl.core to 6.20.0 [PR #13845], by @Shadowghost
Not related to the server, but I was very happily surprised with the latest Roku Jellyfin channel. A complete refresh of everything and it's great to see it.
I can see them doing that, I use a DNS ad-block (Adguardhome) with plenty of filters and last night, I spotted that they were able to inject two ads (standard one to the right of the channels and one at the bottom below the menu for the new Minecraft movie when they changed my background. So, they are finding ways around this stuff. I simply disabled the Sponsored themes. We are on the fence about replacing the TV later this year but not 100% sure just yet. It's been quite buggy randomly rebooting when switching sources and other things.
Back on topic, anyone have a rec for an alternative? I basically just need Netflix and Jellyfin, and hopefully I won't need Netflix soon (my SO keeps finding NF originals they must watch). I to use a regular remote, but AFAIK nothing provides a nice UX for Netflix w/ remote outside the official app.
I can run Netflix on Firefox on Linux, and I can set up a remote to work with Linux. I just can't get the controller to work on Netflix in Firefox with reasonable ergonomics.
The best I've gotten was Kodi running on a Raspberry Pi with a plugin pulled from Android to play media. It worked, but it did break periodically, and the UX sucked. This was a few years ago, so maybe things improved.