le_throosh1d ago

CVE: Possible Organization/Secret Compromise from dangerous CI implementation

https://lemmy.dbzer0.com/post/65996465

CVE: Possible Organization/Secret Compromise from dangerous CI implementation - Divisions by zero

Strange that there was no comms whatsover from the team about this

Show threadrenegadespork1d ago
Everyone might want to freeze your Jellyfin versions until this gets sorted. As far as we know, nothing has been hijacked, but safer sit on your local copies for now.
Show threadLink

Hasn’t it already been patched? https://github.com/jellyfin/jellyfin-ios/security/advisories/GHSA-7qhm-2m45-7fmh

Patches

CI workflows have been modified in all affected repositories, and secrets have been rotated.

Mar 25 at 11:18pmWeb