New Jellyfin Server/Web release: 10.10.7

[ReleaseBot]

We are pleased to announce the latest stable release of Jellyfin, version 10.10.7!

This minor release brings several bugfixes to improve your Jellyfin experience. THIS IS A SECURITY RELEASE - UPGRADING IS IMPORTANT.

Important Note: Configurations behind a reverse proxy that did not explicitly configure trusted proxies will not work after this release. This was never a supported configuration, so please ensure you correct your configuration before upgrading. See the updated docs here for more information.

As always, please ensure you stop your Jellyfin server and take a full backup before upgrading!

You can find the full changelogs on the GitHub releases for the server repository and the web repository.

Release prepared with <3 by @joshuaboniface, the rest of the Jellyfin team, and contributors like you.

Happy watching!

[Tim]

Great work everyone!

[kandykarter]

Before I take the plunge, the trusted proxies section: Does it require ip addresses, or the subdomain like jellyfin.example.com, or what?

[TheDreadPirate]

Before I take the plunge, the trusted proxies section: Does it require ip addresses, or the subdomain like jellyfin.example.com, or what?

You use the IP address of the host running the reverse proxy.

[jessielw]

Good work everyone!

[TheDreadPirate]

@kandykarter - Clarification. You can use the HOSTNAME of the reverse proxy as well. You can also use CIDRs.

But you do NOT put your DOMAIN name in the known proxies field.

[Host-in-the-Shell]

Upgraded without issue after updating the known proxies section; all went smooth without any troubles.

Thanks for the great work, keep it up!

[frostywite]

Updated from .6 to .7 running behind Nginx proxy. Curious to read the GHSA. Is this an issue if the Jellyfin Server and proxy are on the same machine or more if someone is running a separate proxy server?

[jpbaril]

You can also use CIDRs.

I think this should also be clarified in Jellyfin's admin networking 'known proxies' field description.

[AlexKalopsia]

Can someone explain what needs to be done in order to set trusted proxies when using JF behind nginx reverse proxy?