you are viewing a single comment's thread
view the rest of the comments
[–] 5 points 7 months ago (5 children)

Im on fedora and I have installed through dnf, no updates with the dnf update..... should I wait?

  • source
  • hideshow 5 child comments
  • [–] 7 points 7 months ago (4 children)

    I depends a bit on your threat model. If you have Jellyfin exposed to the internet I would shut it down immediately. If you are running locally and rely on it, let it run maybe? If behind a tailnet or some other VPN, I would deactivate it as well. If it is an Axios like vulnerability it may be possible your secrets are in danger, dependent on how well they are secured. Not a security expert, but I would handle this a little more conservative...

  • source
  • parent
  • hideshow 4 child comments
  • [–] 12 points 7 months ago (2 children)

    No need to shut it down if it’s not exposed to the internet. Tailnet/VPN is fine.

    If it’s a supply chain compromise shutting it down wouldn’t matter. The damage is already done.

  • source
  • parent
  • hideshow 2 child comments