manifestVersion: 1
id: jellyfin
category: media
name: Jellyfin
version: "10.8.13"
tagline: The Free Software Media System
description: >-
  Jellyfin is the volunteer-built media solution that puts you in control of your media. Stream to any device from your own server, with no strings attached. Your media, your server, your way.


  Run the Jellyfin server on your system and gain access to the leading free-software entertainment system, bells and whistles included.


  Watch your media from a web browser on your computer, apps on your Roku, Android, iOS (including AirPlay), Android TV, or Fire TV device, or via your Chromecast or existing Kodi installation.


  Jellyfin has no tracking, phone-home, or central servers collecting your data. We believe in keeping our software open and transparent, and anything we might collect (crash logs, etc.) is opt-in only. We’re also not in the media business, so the only media you see is your own.


  The Jellyfin server and clients are free to download, now and always. There are no costs, hidden or otherwise, to use Jellyfin, either for yourself, for your friends, or for your company. All our incidental costs are paid through donations from users like you.
developer: Jellyfin
website: https://jellyfin.org/
dependencies: []
repo: https://github.com/jellyfin/jellyfin
support: https://github.com/jellyfin/jellyfin/issues
port: 8096
gallery:
  - 1.jpg
  - 2.jpg
  - 3.jpg
path: ""
defaultUsername: ""
defaultPassword: ""
releaseNotes: >-
  ⚠️ PREVIOUS CRITICAL SECURITY ADVISORY: For user's still running Jellyfin version 10.8.9 and below, please update Jellyfin immediately.
  There is a significant security issue in previous versions, where two vulnerabilities can be paired to allow any Jellyfin user, even those without admin rights, to remotely control the system.
  One of these issues has been around since the 10.8.0 release, while the other has been present in all versions of Jellyfin up to now. It's essential for all Jellyfin administrators to update to this version,
  especially if they have untrusted users or if their Jellyfin is accessible on the Internet.
  
  
  This update is a hotfix release with no new features or major improvements.


  - NOTICE: The customizable FFmpeg binary path in the WebUI/API has been REMOVED for security reasons.
  

  Full release notes can be found here: https://github.com/jellyfin/jellyfin/releases
torOnly: false
permissions:
  - STORAGE_DOWNLOADS
submitter: Umbrel
submission: https://github.com/getumbrel/umbrel-apps/commit/60878f278d544b204d8e7c96240c797f43a9b319