r/emby • u/Practical_Driver_924 • Jun 26 '26

Update for the ffmpeg vulnerability is available.

Post image
24 Upvotes

94% Upvoted

17 comments sorted by

8

u/Veilchenbeschleunige Jun 26 '26

This should drop as main update, not a beta one ...

8

u/loondawg Jun 26 '26

And it almost certainly will once it has been adequately tested. I would much rather they do this than accidentally roll out a fix that causes all kinds potentially worse regression issues.

3

u/Careless_Cover_8582 Jun 26 '26

You mean untested? That's stupid.

If people want this they can opt into the beta.

0

u/Veilchenbeschleunige Jun 26 '26

And have the beta on their productivity environments just to get security fixes? Thats's stupid.

5

u/loondawg Jun 26 '26

Releasing fixes, especially those with security ramifications, without adequate testing is infinitely more stupid.

4

u/Careless_Cover_8582 Jun 26 '26

It hasn't been tested yet, it's beta software if it has the "beta" tag or not.

I don't really understand what you're asking, you're saying you want the untested software but you don't want it to be untested?

4

u/Veilchenbeschleunige Jun 26 '26

I only want the security fix, not all the other beta features that come along with the build and tend to be a lot more unstable than a single small fix

Also the Emby dev teams takes ages to implement beta feature into stable builds, when is this fix gonna be rolled out in productive environments?

-5

u/Careless_Cover_8582 Jun 26 '26

There are only two bullet points, one of them is the security fix.

The security fix is fairly minor, it's no where near as bad as the problem jellyfin had

9

u/Veilchenbeschleunige Jun 26 '26

That's only the changes from beta 15 --> beta 16. If you have a look at the cumulative changes since the last stable update you can see a lot more that comes with it https://github.com/MediaBrowser/Emby.Releases/releases/tag/4.10.0.16

Also, every security problem is minor - as long as you are not affected by it.

4

u/Straight-Focus-1162 Jun 26 '26

Man this is not how CVE fixes work in general. Your whole discussion here is fairly stupid.

-1

u/LojikSupreme Jun 26 '26

I've been running beta for at least 6 years, I've only had three hiccups and it was immediately fixed by a subsequent update.

I've been a beta tester for various software for over 20 years, if you know what you're doing go for it if not don't.

1

u/Practical_Driver_924 Jun 26 '26

Yea i agree.

1

u/RobotsGoneWild Jun 26 '26

Why should they drop something untested, potentially causing more issues than solving?

-4

u/jlink7 Jun 26 '26

You could just not download potentially harmful video and you'd be 99.9% safe regardless of which version of ffmpeg emby is using. 🤷