70
Plex server patching required (www.bleepingcomputer.com)
submitted 11 months ago by to c/selfhosted@lemmy.world
57 comments fedilink hide all child comments
 

Plex has notified some of its users on Thursday to urgently update their media servers due to a recently patched security vulnerability.

The company has yet to assign a CVE-ID to track the flaw and didn't provide additional details regarding the patch, only saying that it impacts Plex Media Server versions 1.41.7.x to 1.42.0.x.

you are viewing a single comment's thread
view the rest of the comments
[–] 11 points 11 months ago (1 child)

I'm on Jellyfin as they banned Hetzner.

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 27 points 11 months ago (2 children)

    Should clarify Plex banned using Hetzner :)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 7 points 11 months ago (2 children)

    i'm ootl; how was plex able to ban them? isn't hetzner just a vps provider? (not questioning you; just curious)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 23 points 11 months ago (2 children)

    Plex blocked Hetzner IPs, so servers hosted there can't reach plex.tv to auth users or validate plex pass.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 9 points 11 months ago (1 child)

    that's wild :o

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 7 points 11 months ago

    That's what you get for using anything that doesn't work fully offline. Seriously people still defending Plex and not seeing that it will bite them back sooner or later are delusional.

    Given that hardware doesn't die, my Jellyfin will probably work until the heat death of the universe.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 0 points 11 months ago (1 child)

    I've been using a reverse proxy on a Hetzner VPS pointing at my home plex server for years without issue. Maybe this only applies to people running the actual Plex software on a Hetzner VPS?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 11 months ago

    https://torrentfreak.com/plex-will-block-media-servers-at-prevalent-hosting-company-230915/

    There's the story but there's not much tea.

    I'm guessing there were just enough complaints and Hetzner refused to take anything down.

    Really bizarre to license people self-hosting software and then refuse them from hosting it in certain places over what content they choose to put up.

    I wonder if they'll just roll through all the VPS now.

  • permalink
  • fedilink
  • source
  • parent