this post was submitted on 25 Mar 2026
1 points (100.0% liked)

Jellyfin: The Free Software Media System

9085 readers
1 users here now

Current stable release: 10.11.11

Community Standards

Website

Forum

GitHub

Documentation

Feature Requests

Matrix (General Information & Help)

Matrix (Announcements)

Matrix (General Development)

Matrix (Off-Topic) - Come get to know the team and blow off steam!

Matrix Space - List of all the available rooms on Matrix.

Discord - Bridged to our Matrix rooms

founded 6 years ago
MODERATORS
 

Strange that there was no comms whatsover from the team about this

you are viewing a single comment's thread
view the rest of the comments
[–] le_throosh@lemmy.dbzer0.com 0 points 3 months ago

To clarify: This is about a possible supply chain attack. The possibility of it. Not about unsafe code in the app or anywhere else. It means that an attacker could have gained access to the ios repo and possibly any other repo. It is fixed now.

I imagine that hostile commits would have been caught by now, as would compromised releases. But the main issue for me is that we are pretty much left in the dark about this. Maybe the team checked everything well and came to the conclusion that this was nothing worry about and was catched before it could do any harm. Which is the most probable scenario I think. Still leaves a bit of a sour taste.