Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Build of Qnap plugin not up to date #125

Open
NanashiTheNameless opened this issue Jan 1, 2025 · 5 comments
Open

Build of Qnap plugin not up to date #125

NanashiTheNameless opened this issue Jan 1, 2025 · 5 comments

Comments

@NanashiTheNameless
Copy link

NanashiTheNameless commented Jan 1, 2025

build of the plugin is not up to date and depends on old version of jellyfin,
that contains issues such as GHSA-9p5f-5x8v-x65m

@pdulvp
Copy link
Owner

pdulvp commented Jan 1, 2025

Looks like fixed while ago.
10.8.10, now we are 10.10.3

@pdulvp pdulvp closed this as completed Jan 1, 2025
@NanashiTheNameless
Copy link
Author

your build system refuses to build plugins as they still use an outdated version

@pdulvp
Copy link
Owner

pdulvp commented Jan 2, 2025

your build system refuses to build plugins as they still use an outdated version

but is it related to GHSA-9p5f-5x8v-x65m ?

@NanashiTheNameless
Copy link
Author

NanashiTheNameless commented Jan 2, 2025

that is the case, as dotnet reports being unable to build as a result of

    <PackageReference Include="Jellyfin.Controller" Version="10.7.7" Condition="'$(TargetFramework)' == 'net5.0'" />
    <PackageReference Include="Jellyfin.Model" Version="10.7.7" Condition="'$(TargetFramework)' == 'net5.0'" />
    <PackageReference Include="Jellyfin.Controller" Version="10.8-*" Condition="'$(TargetFramework)' == 'net6.0'" />
    <PackageReference Include="Jellyfin.Model" Version="10.8-*" Condition="'$(TargetFramework)' == 'net6.0'" />

this still uses 10.7 and 10.8
10.7 < 10.8.10
10.8 < 10.8.10

@pdulvp pdulvp reopened this Jan 2, 2025
@pdulvp pdulvp changed the title Severe security threat relating to Jellyfin.Controller Build of Qnap plugin not up to date Jan 2, 2025
@pdulvp
Copy link
Owner

pdulvp commented Jan 2, 2025

ok just build issue then. drscription updated.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants