pandora/media-server.image-copy
Watch
4
0
Fork
You've already forked media-server.image-copy
 0
generated from pandora/image-copy.template
Code Issues 2 Pull requests Projects Releases Packages 6 Wiki Activity Actions

maint: Update ghcr.io/seerr-team/seerr Docker tag to v3.4.0 #40

Merged
bot-ci merged 1 commit from renovate/all-dependencies into main 2026-07-28 03:12:27 +00:00
Conversation 0 Commits 1 Files changed 1 +1 -1
renovate-bot commented 2026-07-28 02:23:52 +00:00
Owner
Copy link

This PR contains the following updates:

Package Update Change
ghcr.io/seerr-team/seerr minor v3.3.0 → v3.4.0

Release Notes

seerr-team/seerr (ghcr.io/seerr-team/seerr)

v3.4.0

Compare Source

This release patches a path traversal vulnerability in the avatar image proxy.

Exploitation vectors:

  • A malicious or compromised Jellyfin/Emby media server returning a crafted HTTP response.
  • A man-in-the-middle attacker intercepting the connection to the media server, if it is configured over HTTP instead of HTTPS (the default setting).
🛡️ Security
🚀 Features
🐛 Bug Fixes
  • (availability-sync) Prevent false removals for merged-version Plex items (#​3224) - (46d8033)
  • (discover) Use added sort in recent requests slider (#​3202) - (8ccd0f6)
  • (email) Respect hosts file for SMTP connections (#​3082) - (b660201)
  • (i18n) Fallback to server locale for "Default" user lang in notifs (#​3190) - (ef9edc8)
  • (next) Add next-env.d.ts to .gitignore (#​3282) - (3279393)
  • (notifications) Make the Discord IDs available even when the notification is disabled on Seerr (#​3139) - (a8f1780)
  • (proxy) Proxy clients built before proxy init (#​3196) - (8ad191f)
  • (scanners) Decline orphaned requests when media is removed from servarr (#​3191) - (2e0e4ce)
  • (subscriber) Await request status updates (#​3223) - (f481b56)
  • (ui) Revalidate request list after approving or declining a request (#​3283) - (e810b98)
  • (webpush) Guard subscriptions request until user loads (#​3113) - (6829850)
  • Support for IPv6 address literals in HOST env var (#​2614) - (0adbf50)
  • Prevent cross-instance external ID collisions (#​3203) - (8e02d92)
  • Close manage movie sidebar without back reopening (#​2590) - (0a1f703)
  • Availability sync demotion and orphan season rollup edge cases (#​3148) - (784faa9)
📖 Documentation
⚙️ Miscellaneous Tasks
  • (actions) Update github actions (#​3041) - (0438710)
  • (dev) Add devenv setup (#​3138) - (d2ffe4f)
  • (i18n) Update translations from Weblate - (4b65ab5)
  • (i18n) Update translations from Weblate - (1926095)
  • (i18n) Update translations from Weblate - (d051deb)
  • (i18n) Update translations from Weblate - (8d351bc)
  • (i18n) Update translations from Weblate - (3f33842)
  • (i18n) Update translations from Weblate - (6c8527f)
  • (i18n) Update translations from Weblate - (ab26f06)
  • (i18n) Update translations from Weblate - (0a305f6)
  • (i18n) Update translations from Weblate - (32249f2)
  • (i18n) Update translations from Weblate - (2a249a8)
  • (release) Prepare v3.4.0 - (2dbe886)
  • (release) Prepare 3.4.0 release - (b21049a)

New Contributors ❤️

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/seerr-team/seerr](https://github.com/seerr-team/seerr) | minor | `v3.3.0` → `v3.4.0` | --- ### Release Notes <details> <summary>seerr-team/seerr (ghcr.io/seerr-team/seerr)</summary> ### [`v3.4.0`](https://github.com/seerr-team/seerr/releases/tag/v3.4.0) [Compare Source](https://github.com/seerr-team/seerr/compare/v3.3.0...v3.4.0) This release patches a path traversal vulnerability in the avatar image proxy. Exploitation vectors: - A malicious or compromised Jellyfin/Emby media server returning a crafted HTTP response. - A man-in-the-middle attacker intercepting the connection to the media server, if it is configured over HTTP instead of HTTPS (the default setting). ##### 🛡️ Security - Patch [GHSA-mc6w-69r3-62h8](https://github.com/seerr-team/seerr/security/advisories/GHSA-mc6w-69r3-62h8) - Path Traversal leading to Remote Code Execution vulnerability (in seerr's ImageProxy) - ([f484791](https://github.com/seerr-team/seerr/commit/f484791105bd81bd5404e01410431ee6fe5769c2)) ##### 🚀 Features - *(PlexImportModal)* Add user details sync functionality ([#&#8203;2977](https://github.com/seerr-team/seerr/issues/2977)) - ([902b88e](https://github.com/seerr-team/seerr/commit/902b88e16a0075da8831e6293954bdfafd6db4d8)) - *(api)* Support `userId` when creating issues ([#&#8203;3100](https://github.com/seerr-team/seerr/issues/3100)) - ([5f2722d](https://github.com/seerr-team/seerr/commit/5f2722da30ba000f2d07ddaa099c7d6416378458)) - *(external-links)* Add Simkl media link ([#&#8203;3121](https://github.com/seerr-team/seerr/issues/3121)) - ([5ae70d0](https://github.com/seerr-team/seerr/commit/5ae70d05e1ee123b3cda43153ed415754fd8e816)) - *(notifications)* Add Discord thread ID support ([#&#8203;3065](https://github.com/seerr-team/seerr/issues/3065)) - ([6e9ba06](https://github.com/seerr-team/seerr/commit/6e9ba06e88d283c4c5c409c9fdac6d74ed8feaa1)) - *(requests)* Allow admins to bypass user quota limits ([#&#8203;2026](https://github.com/seerr-team/seerr/issues/2026)) - ([72536da](https://github.com/seerr-team/seerr/commit/72536da50ea97278b0330ccc42c5b33fb864000b)) - Allow to disable version check ([#&#8203;3137](https://github.com/seerr-team/seerr/issues/3137)) - ([73937c0](https://github.com/seerr-team/seerr/commit/73937c0ccd667daed67e320a7fbc032b1207ef53)) - Add jellyfin/emby quick connect authentication ([#&#8203;2212](https://github.com/seerr-team/seerr/issues/2212)) - ([74c8db4](https://github.com/seerr-team/seerr/commit/74c8db42a643c2c63e16cdd58ba790f6adfb7ab5)) ##### 🐛 Bug Fixes - *(availability-sync)* Prevent false removals for merged-version Plex items ([#&#8203;3224](https://github.com/seerr-team/seerr/issues/3224)) - ([46d8033](https://github.com/seerr-team/seerr/commit/46d80335991cc7c5a9e1c501e274f5a90a6c07c9)) - *(discover)* Use added sort in recent requests slider ([#&#8203;3202](https://github.com/seerr-team/seerr/issues/3202)) - ([8ccd0f6](https://github.com/seerr-team/seerr/commit/8ccd0f624530035089998e76b57a627f58c7eb7f)) - *(email)* Respect hosts file for SMTP connections ([#&#8203;3082](https://github.com/seerr-team/seerr/issues/3082)) - ([b660201](https://github.com/seerr-team/seerr/commit/b66020128bdc6bca4de9ec2577e122d8f6d29139)) - *(i18n)* Fallback to server locale for "Default" user lang in notifs ([#&#8203;3190](https://github.com/seerr-team/seerr/issues/3190)) - ([ef9edc8](https://github.com/seerr-team/seerr/commit/ef9edc832fa5efed53e330563e6db1fddbb44cf4)) - *(next)* Add next-env.d.ts to .gitignore ([#&#8203;3282](https://github.com/seerr-team/seerr/issues/3282)) - ([3279393](https://github.com/seerr-team/seerr/commit/3279393c7914c1d73af24ddc8252ce9fff8966e6)) - *(notifications)* Make the Discord IDs available even when the notification is disabled on Seerr ([#&#8203;3139](https://github.com/seerr-team/seerr/issues/3139)) - ([a8f1780](https://github.com/seerr-team/seerr/commit/a8f1780bee589cdce5544356212a4dd2272d94e0)) - *(proxy)* Proxy clients built before proxy init ([#&#8203;3196](https://github.com/seerr-team/seerr/issues/3196)) - ([8ad191f](https://github.com/seerr-team/seerr/commit/8ad191f42b5c58032d609b1eef38c3a1ae3ab23a)) - *(scanners)* Decline orphaned requests when media is removed from servarr ([#&#8203;3191](https://github.com/seerr-team/seerr/issues/3191)) - ([2e0e4ce](https://github.com/seerr-team/seerr/commit/2e0e4ceb2a0100bd411e6432b1d5c5e3a553644c)) - *(subscriber)* Await request status updates ([#&#8203;3223](https://github.com/seerr-team/seerr/issues/3223)) - ([f481b56](https://github.com/seerr-team/seerr/commit/f481b56a7ac30444551b28508e30eeb415716a3c)) - *(ui)* Revalidate request list after approving or declining a request ([#&#8203;3283](https://github.com/seerr-team/seerr/issues/3283)) - ([e810b98](https://github.com/seerr-team/seerr/commit/e810b9814d2b41ef31630f09b5dd0da1e9dec690)) - *(webpush)* Guard subscriptions request until user loads ([#&#8203;3113](https://github.com/seerr-team/seerr/issues/3113)) - ([6829850](https://github.com/seerr-team/seerr/commit/6829850bbcddb9f0fdddf0fe6ef483566050d566)) - Support for IPv6 address literals in HOST env var ([#&#8203;2614](https://github.com/seerr-team/seerr/issues/2614)) - ([0adbf50](https://github.com/seerr-team/seerr/commit/0adbf50b5c448cc5ca928480017890abb2dc5776)) - Prevent cross-instance external ID collisions ([#&#8203;3203](https://github.com/seerr-team/seerr/issues/3203)) - ([8e02d92](https://github.com/seerr-team/seerr/commit/8e02d927dfb18007401dc9af9c5491d253e3b2f4)) - Close manage movie sidebar without back reopening ([#&#8203;2590](https://github.com/seerr-team/seerr/issues/2590)) - ([0a1f703](https://github.com/seerr-team/seerr/commit/0a1f7035d0332fb2e14dce67cee13cc061e706fb)) - Availability sync demotion and orphan season rollup edge cases ([#&#8203;3148](https://github.com/seerr-team/seerr/issues/3148)) - ([784faa9](https://github.com/seerr-team/seerr/commit/784faa9f84542dc32fa06150d49761b46be76efe)) ##### 📖 Documentation - *(blog)* Rootless design and PUID/PGID rationale ([#&#8203;3105](https://github.com/seerr-team/seerr/issues/3105)) - ([bf5323f](https://github.com/seerr-team/seerr/commit/bf5323faf4feb15ecfeafeef33131c258e7f0be9)) - *(blog)* Fix "monitorNewItems" feature description and previous post author ([#&#8203;3103](https://github.com/seerr-team/seerr/issues/3103)) - ([4e7a227](https://github.com/seerr-team/seerr/commit/4e7a227bffbeb5ebfa12fbf878a440df652a8d39)) - Update truenas migration section to include chown ([#&#8203;3143](https://github.com/seerr-team/seerr/issues/3143)) - ([ebac489](https://github.com/seerr-team/seerr/commit/ebac489c8aa1fd1a004f40cbe60a9061c370b19b)) - Add TrueNAS migration guidance ([#&#8203;3107](https://github.com/seerr-team/seerr/issues/3107)) - ([8b062ed](https://github.com/seerr-team/seerr/commit/8b062ed95db14bc0ea06973add6d579d5c12fd6b)) ##### ⚙️ Miscellaneous Tasks - *(actions)* Update github actions ([#&#8203;3041](https://github.com/seerr-team/seerr/issues/3041)) - ([0438710](https://github.com/seerr-team/seerr/commit/043871076177c52ad442ad6f596df063524cb8ef)) - *(dev)* Add devenv setup ([#&#8203;3138](https://github.com/seerr-team/seerr/issues/3138)) - ([d2ffe4f](https://github.com/seerr-team/seerr/commit/d2ffe4f75cce4354e46dd29d3f64c3e0242c116d)) - *(i18n)* Update translations from Weblate - ([4b65ab5](https://github.com/seerr-team/seerr/commit/4b65ab507d6317fec80603acc9fbad63db9ca392)) - *(i18n)* Update translations from Weblate - ([1926095](https://github.com/seerr-team/seerr/commit/192609566c3c23cf15ff77a9f85649cd07f7355d)) - *(i18n)* Update translations from Weblate - ([d051deb](https://github.com/seerr-team/seerr/commit/d051deb81103817101ff20384be1f87df811cf59)) - *(i18n)* Update translations from Weblate - ([8d351bc](https://github.com/seerr-team/seerr/commit/8d351bce6594c9c6a0e64aafa7d5fbc55b7a6129)) - *(i18n)* Update translations from Weblate - ([3f33842](https://github.com/seerr-team/seerr/commit/3f3384265e9a2e6155a69332df1f52aebca6ea29)) - *(i18n)* Update translations from Weblate - ([6c8527f](https://github.com/seerr-team/seerr/commit/6c8527fea330662571dc819860b4fa4844ce01c0)) - *(i18n)* Update translations from Weblate - ([ab26f06](https://github.com/seerr-team/seerr/commit/ab26f068f2ed515490058d5ac2abd831d72a82f7)) - *(i18n)* Update translations from Weblate - ([0a305f6](https://github.com/seerr-team/seerr/commit/0a305f6e18d888bc5029fcbfa6fd8a7399392210)) - *(i18n)* Update translations from Weblate - ([32249f2](https://github.com/seerr-team/seerr/commit/32249f26fe22620436a9c8a5b1f33959df054a34)) - *(i18n)* Update translations from Weblate - ([2a249a8](https://github.com/seerr-team/seerr/commit/2a249a85ae9684a70808fe924179b661a4410a85)) - *(release)* Prepare v3.4.0 - ([2dbe886](https://github.com/seerr-team/seerr/commit/2dbe8860179e83ed2044d5fc8ed17679ae05e5ad)) - *(release)* Prepare 3.4.0 release - ([b21049a](https://github.com/seerr-team/seerr/commit/b21049a4c2539eafff460099014f74c5e3408c34)) #### New Contributors ❤️ - [@&#8203;aaamoeder](https://github.com/aaamoeder) made their first contribution - [@&#8203;kouellette](https://github.com/kouellette) made their first contribution - [@&#8203;u61d](https://github.com/u61d) made their first contribution - [@&#8203;thraizz](https://github.com/thraizz) made their first contribution - [@&#8203;john-fletcher](https://github.com/john-fletcher) made their first contribution - [@&#8203;Gilmoursa](https://github.com/Gilmoursa) made their first contribution - [@&#8203;atoy3731](https://github.com/atoy3731) made their first contribution - [@&#8203;nightt5879](https://github.com/nightt5879) made their first contribution </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODAuNCIsInVwZGF0ZWRJblZlciI6IjQzLjI4MC40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
maint: Update ghcr.io/seerr-team/seerr Docker tag to v3.4.0
All checks were successful
ci/woodpecker/pr/pr_check Pipeline was successful
Details
ci/woodpecker/pr/ci Pipeline was successful
Details
f663269dcc
bot-ci merged commit 5323960848 into main 2026-07-28 03:12:27 +00:00
bot-ci deleted branch renovate/all-dependencies 2026-07-28 03:12:28 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
pandora/media-server.image-copy!40
No description provided.