• FackCurs@lemmy.worlddeleted by creator
    link
    fedilink
    English
    arrow-up
    15
    ·
    2 months ago

    Is it standard practice to release the security updates on GitHub?

    I am a very amateur self hoster and wouldn’t go on the github of projects on my own unless I wanted to read the “read me” for install instructions. I am realizing that I got aware I needed to update my Jellyfin container ASAP only thanks to this post. I would have never checked the GitHub.

    • ShortN0te@lemmy.ml
      link
      fedilink
      English
      arrow-up
      16
      ·
      2 months ago

      Is it standard practice to release the security updates on GitHub?

      Yes.

      And then the maintainers of the package on the package repository you use will release the patch there. Completely standard operation.

      I recommend younto read up on package repositories on Linux and package maintainers etc.

    • irmadlad@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 months ago

      I am realizing that I got aware

      I don’t run the arr stack, but this is key. You really should do your due diligence before you update anything. Personally, I wait unless it’s a security issue, and use all the early adopters as beta testers.

      • FackCurs@lemmy.worlddeleted by creator
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 months ago

        Wait a minute, best security practice is to use the latest version -1?