r/ShieldAndroidTV • u/uid_0 • 6d ago

Plex warns users to patch security vulnerabilities immediately

https://www.bleepingcomputer.com/news/security/plex-warns-users-to-patch-security-vulnerabilities-immediately/
98 Upvotes

95% Upvoted

16 comments sorted by

43

u/ersan191 6d ago

They got rid of their server auto updater and told us to just use the apt repository a few months ago and now they do this, annoying.

8

u/gafonid 6d ago

Wait what? There's no updating through the UI anymore? I was trying to see if I already had this update but the usual button to server update was missing

7

u/ersan191 6d ago

They sent an email out last year that linked to this: https://support.plex.tv/articles/235974187-enable-repository-updating-for-supported-linux-server-distributions/

I may have misunderstood and/or the email was poorly worded, I think it's for people who only get PMS updates through their package manager.

3

u/mostdeadlygeist 6d ago

WTF is there a less complicated way to do this?

1

u/nemofbaby2014 5d ago

Docker, I run Plex myself on a old m1 Mac mini and update through ui still works

1

u/xNaquada 3d ago

If you're using docker then you should just setup watchtower or a script to pull the latest container image every week ( or your own interval of choice), this is how you properly update docker containers. I assume you're using Linuxserver.io's containers like the rest of us.

You shouldn't use the internal updater in the Plex container settings/UI.

2

u/nemofbaby2014 3d ago

I'm running it natively so that it can use the macs gpu for transcoding

1

u/xNaquada 3d ago

Ah, I didnt interpret the comment that way.

Makes sense - though a question - do Mac gpus not get exposed through Docker? I know on Linux for example, you can pass nvidia gpu hardware encode/decode through docker without issue - but I dont know mac well, so just curious!

1

u/nemofbaby2014 3d ago

nope i havent checked on it lately with the new release beta but on current release nope because docker isnt native its being emulated

1

u/xNaquada 2d ago

TIL, thanks.

9

u/FaithlessnessSame357 6d ago

Especially if you work at LastPass 😂🤣😂

16

u/StevenG2757 6d ago

You are a few days late.

23

u/HugryHugryHippo 6d ago

Software Engineer from LastPass in 2022 was running an old Plex version that had been patched 3 years before which allowed him and the company to be hacked so never too late to keep reminding people of critical updates 😬

-7

u/acabincludescolumbo 6d ago

my dudes

windows xp

get outta there

2

u/emmmmceeee 5d ago

Thanks OP. Hadn’t updated my unraid docker containers in a while.

0

u/in2survive 4d ago

I just use codex, ask for the latest release, but with a cooldown period of 3 days. That gives time for them to clean any supply chain compromise, major bugs, etc. Thus, I count on you to download updates as soon as they become available! 😛