Assuming the user will not be connecting over vpn, but is both remote and non-technical, how would you expose Jellyfin to them securely?

  • Andres@social.ridetrans.it
    3·
    22 hours ago

    @KneeTitts @Jason2357 Recently there are a lot of zero-day kernel exploits (local privilege escalation), so I would make sure “up to date” includes regular reboots into new kernels. As opposed to just relying on something like unattended-upgrades.

    For the past few weeks we’ve been averaging one LPE per week, and it’s probably going to continue like that for a bit.