WARNING: This release contains several extremely important security fixes. These vulnerabilities will be disclosed in 14 days as per our security policy. Users of all versions prior to 10.11.7 are advised to upgrade immediately.

You can find more details about and discuss this release on the official forums.

As always, please ensure you stop your Jellyfin server and take a full backup of your metadata/configs before upgrading!

🚀 Jellyfin Server 10.11.7

🔒 Security

Fix for GHSA-j2hf-x4q5-47j3, by @Shadowghost
Fix for GHSA-8fw7-f233-ffr8, by @Shadowghost
Fix for GHSA-v2jv-54xj-h76w, by @Shadowghost
Fix for GHSA-jh22-fw8w-2v9x, by @Shadowghost

📈 General Changes

Fix CA1810 build error [PR #16522], by @Bond-009
Fix Null was not checked before using the H264 profile [PR #16519], by @nyanmisaka
Remove -copyts and add -flush_packets 1 to subtitle extraction [PR #16440], by @Molier
Fix lint issue [PR #16514], by @theguymadmax
Fix nullref ex in font handling [PR #16369], by @Bond-009
Fix restore backup metadata location [PR #16425], by @theguymadmax
Fix NFO saver using wrong provider ID for collectionnumber [PR #16449], by @theguymadmax
Fix readrate options in FFmpeg 8.1 [PR #16423], by @nyanmisaka
Apply analyzeduration and probesize for subtitle streams to improve codec parameter detection [PR #16293], by @IceStormNG
Fix filter detection in FFmpeg 8.1 [PR #16392], by @nyanmisaka
Fix subtitle extraction caching empty files [PR #16257], by @lowbit
Fix hls segment length adjustment for remuxed content [PR #16341], by @crimsonspecter
Fix broken library subtitle download settings [PR #16204], by @MBR-0001
Checkpoint WAL before moving library.db in migration [PR #16253], by @theguymadmax
Fix nullref in Season.GetEpisodes when the season is detached from a series [PR #16150], by @dfederm
Reattach user data after item removal during library scan [PR #16227], by @dfederm
Deduplicate provider IDs during MigrateLibraryDb migration [PR #16226], by @dfederm
Skip image checks for empty folders [PR #16231], by @theguymadmax
Fix TMDB image URLs missing size parameter [PR #16116], by @saltpi
Fix random sort returning duplicate items [PR #16098], by @theguymadmax
Fix SessionInfoWebSocketListener not using SessionInfoDto [PR #16109], by @nielsvanvelzen
Fix HLS playlist generation for transcodes with fractional framerate [PR #16053], by @IceStormNG
Rehydrate cached UserData after reattachment [PR #16071], by @MarcoCoreDuo
Fix TMDB crew department mapping [PR #16066], by @theguymadmax
Revert hidden directory ignore pattern [PR #16077], by @theguymadmax

🚀 Jellyfin Web 10.11.7

🏗️ Enhancements

Improve performance by disabling unnecessary user data when retrieving list of playlists [PR #7261], by @kevgrig
Add padding to mobile drawer [PR #7529], by @viown
Use display missing episodes setting in search [PR #7528], by @lmaotrigine
Add client names to image.ts [PR #7518], by @nielsvanvelzen
Allow to play Dolby Vision with fallback on webOS [PR #7526], by @antaljanosbenjamin
Wait for app host to initialize before proceeding [PR #7516], by @nielsvanvelzen
Fix alignment of music lyrics containing RTL or bidi text [PR #7461], by @ebkalderon

📈 General Changes

Fix crashes on playback exit [PR #7645], by @thornbill
Fix music video random playback [PR #7632], by @theguymadmax
Fix carousel buttons for "My Media" appearing needlessly [PR #7391], by @bjorntp
Add autofocus to ConnectionErrorPage and FallbackRoute [PR #7641], by @dmitrylyzo
Order MediaMetadata.artwork from highest resolution to smallest [PR #7631], by @agausmann
Add polling fallback to sessions [PR #7565], by @viown
Fix card and item list accessibility issues [PR #7514], by @thornbill
Disable AV1 and OPUS on Xbox One [PR #7547], by @JPVenson
Fix random sort items refetching [PR #7541], by @thornbill
Navigate to wizard if not completed on server add [PR #7504], by @viown
Fix library menu button disappearing when name is too long [PR #7475], by @FelixRoediger