Calendar / Auth: Pin the resolved IP address at socket-connect time when fetching caller-supplied URLs (iCalendar subscriptions, JMAP login and TOTP token-exchange servers). The public-host check used to run before fetch() opened its socket, so an attacker who controlled DNS for a hostname could rebind it to loopback, RFC-1918 or cloud-metadata addresses between the check and the connect and read up to 10 MB of the internal response through the unauthenticated /api/fetch-ical endpoint. Redirect targets are now validated the same way (GHSA-24w9-8r42-8jwm, thanks @Tike00)
Features
Push: Re-sync existing push registrations in the background on app start, so registrations created before the delivery filter existed β or whose Junk mailbox id went stale β get repaired without re-enabling notifications
Fixes
Push: Stop sending notifications for spam β the push subscription now carries a JMAP emailPush delivery filter that excludes $junk and the Junk mailbox (needs a server advertising the emailPush capability, e.g. Stalwart β₯ 0.16.16; older servers keep the previous behaviour)
Applied authentication rate limits per real client behind reverse proxies and Cloudflare, preventing visitors from sharing one rate-limit bucket (#11515).
Reset a server's unreachable counter after a successful connection check, preventing stale failures and false unreachable alerts (#11417, closes #11416).
Corrected placeholder alignment in code editor fields (#11514, closes #11420).
Queued Cloud registration verification emails with retries, making delivery more reliable.
What's Changed
fix(server): reset unreachable_count after successful connection check by @mrcleanandfresh in #11417
UniFi Network Application 10.6.101 adds Drift Inspector, Topology Spotlight, and expanded Safe Ops features, along with the improvements and bug fixes listed below.
Β
Added Drift Inspector to Blueprints in Site Manager
Make local changes to sites using Blueprint orchestrations, with a clear view of configuration drift and an easy way to resolve it.
Added Topology Spotlight
Quickly highlight and filter selected devices for easier navigation and troubleshooting in large topologies.
Improved SafeOps features
Expanded Test & Confirm support to VPN and Management networks.
Added Nightly Channel AI Optimization with configurable radio selection and an improved optimization algorithm.
Improved Time Machine Experience
Added Time Machine for Radios to review radio usage metrics, configuration changes, and radio events from the past 24 hours.
Expanded Port Manager Time Machine to All Ports, making it easier to identify and troubleshoot problematic network segments.
Improvements
Added a flapping devices filter to Port Manager Time Machine for clients with frequent reconnections.
Added the Reduced Firewall State Timeouts profile for EFG, EF-Core, and UXG-Enterprise.
Added a confirmation prompt when updating all devices from the Devices filter side panel.
Added sorting to Network Lists and descriptions on hover.
Added column sorting to tables in Settings Overview.
Added an Allow Empty Password option for RADIUS MAC Authentication.
Added the ability to disable the LCM screen on meshed UX7 devices.
Added Sort by Topology to the Devices page.
Added a notice for unsupported devices in Test & Confirm settings.
Added a disabled port filter to Port Manager.
Added an Additional Labels option to Infrastructure Topology.
Added a warning in Topology when Sonos devices with mixed wired and wireless connections are detected.
Added validation to prevent OpenVPN Server and Site-to-Site VPNs from using the same UDP port.
Added a Spotlight selection option in Topology.
Added the ability to disable insecure OpenVPN compression.
Added Multicast Suppressor support.
Requires UAP 8.8 or newer.
Added a Lock Port to UniFi Device option to Port Manager.
Requires Switch firmware version 7.6 or newer.
Added support for adopting multiple U5G devices on the same site over LAN.
Added support for using Domain Network Lists in QoS Policies.
Added support for customizing WAN interfaces used for Automatic Speed Tests.
Added Bulk Update Management to the Devices page.
Improved Device Auto-Recovery stability.
Improved Data Plane Protection resiliency.
Improved Traffic Activity Statistics accuracy.
Improved the Observability section.
Improved the device revert experience by allowing easy reversion for all devices with the same Device model and version.
Improved DHCP Options validation.
Improved the Dynamic DNS settings user experience.
Improved RADIUS settings validation.
Improved Virtual Network management in Topology.
Improved the AV Manager user experience.
Improved Honeypot validation.
Improved the display of unstable links in Infrastructure Topology.
Improved network subnet validation against static route destinations.
Improved Port Profiles management in Port Manager.
Improved Port Manager by automatically opening Time Machine.
Improved the Device Update confirmation screen by showing the number of connected devices that might be interrupted.
Improved OpenVPN server configuration files by removing periodic TLS key renegotiation.
Requires UniFi OS 5.1 or newer
Improved VPN Server settings validation.
Improved application startup resiliency.
Improved the Port Forwarding table user experience.
Removed the Network Override option for WAN-adopted U5G devices.
Removed the STP Edge note from Port Manager when Auto STP Edge is disabled.
Separated the Reset Stats and Clear Last Seen Device actions in Port Manager.
Enabled DHCP Guarding by default on new networks.
Bugfixes
Fixed an issue where client devices with a configured Power Source could be automatically enrolled in Device Auto-Recovery.
Fixed an issue where the AP Stopped Mesh system log could be generated repeatedly after an AP switched to a wired uplink.
Fixed an issue where the High Traffic alarm incorrectly reported wireless client downloads as uploads.
Fixed an issue where SD-WAN Mesh VPN tunnels could remain after the configuration was removed.
Fixed an issue where the client count in the WiFi Broadcast overview was incorrect when MLO clients were connected.
Fixed an issue where filter counters could flicker on the Connectivity page in rare cases.
Fixed an issue where the hostname was not set correctly for a UX7 connected via mesh.
Fixed an issue where a custom APN could be lost after moving a SIM between slots on a U5G.
Fixed an issue where the UX7 did not display connected wireless clients in the Devices list.
Fixed a rare issue where opening Client Observability could impact system stability.
Fixed an issue where DAS/DAC (CoA) was unavailable when using Open security with RADIUS MAC Authentication.
Fixed an issue where MC-LAG configurations could be lost after restoring a backup.
Fixed an issue where the Connectivity page was missing some roaming events.
Fixed a rare issue where adopting an LTE device could cause a gateway configuration error.
Additional information
Β
UniFi OS Server
Going forward, we recommend users upgrade toΒ UniFi OS ServerΒ for all self-hosted deployments. It provides the full UniFi OS Platform experience, ensuring you receive the latest features, improvements, and integrations.
UniFi Network Native Application for UniFi OS
Compatible with UDM, UDR, UDR7, UDR 5G Max, Express, Express 7, and UCG models (Ultra, Max, Fiber, and Industrial) on UniFi OS 3.1.6 or later. UDM-Pro, UDM-SE, and UDW have been using it since UniFi OS 5.1.5.
The UniFi OS update utilizes the application version compatible with your console.
The manual update process via SSH requires a compatible package. Incompatible packages will be rejected on installation.
Older UniFi OS versions (prior to UniFi OS 3.1.6) on the UDM and UDR continue to utilize the standard UniFi Network Application for UniFi OS.
The Stable channel has been updated to 153.0.8010.12/.13 for Windows andMac as part of our early stable release to a small percentage of users. A full list of changes in this build is available in thelog.
You can find more details about early Stable releases here.
Interested in switching release channels? Β Find out how here. If you find a new issue, please let us know by filing a bug. The community help forum is also a great place to reach out for help or learn about common issues.
Navigation: Forward every request header through the proxy β Next 16.3's RSC header check rejected the stripped router headers and sent navigations into a 307 redirect loop (#919)
Calendar: Stop emitting RSCALE=GREGORIAN;SKIP=OMIT on plain Gregorian recurrence rules β DAVx5 rejected them as invalid and Android sync broke (#805, thanks @hildebrandttk)
Today, weβre excited to introduce you to some of the talented team members behind the upcoming Nevada Rework for American Truck Simulator. This project brings a fresh look to one of the gameβs original states, with updated roads, cities, landscapes, and landmarks that better reflect our current standards.
In this Meet the Team episode, youβll hear directly from the developers who have been working on different parts of Nevada and learn more about their experiences, favorite locations, and what theyβre most looking forward to players discovering. So, letβs take a closer look at the people helping bring the Silver State back to life!
Ella - Senior Map Designer
Iβve been at SCS for close to 7 years, and in that time Iβve worked on many projects, starting my journey with the Utah DLC in 2019. From there, I moved on to work on large cities across several states, such as El Paso, Texas; San Diego, California; and Albuquerque, New Mexico.
As our teamβs road specialist, I oversee Nevadaβs road layout and also do work on some of the truck stops there, which are critical for our gameplay by providing players an opportunity to refuel and rest. Besides that, Iβm working on the city of Phoenix, Arizona, which will be included as another part of our Rework project.
Iβm looking forward to watching players explore the newly added locations and seeing their reactions as well as getting their feedback, which is always appreciated. I love creating maps so many people enjoy driving in; that always feels very rewarding on its own.Β
Johny - Senior Map Designer
Iβve been at SCS for six years. I started out working on sections of Texas and Montana before moving fully into Rework. Iβve been part of the rework team since the very beginning.
Over the years, Iβve worked on both roads and cities, including San Jose, Santa Cruz, El Centro, and Grand Canyon. Most recently, for the Nevada Rework, Iβve been working on the roads around Panaca and Las Vegas, as well as Panaca itself and the northern part of Las Vegas.
I love working on epic scenery, which is why I really enjoyed working on the Grand Canyon, and Iβm having just as much fun working on Las Vegas now. I think Nevada will now meet our current standards, and players can look forward to a faithful recreation of the real-life locations.
Pavel - Senior Map Designer
I've been part of SCS for almost four years now. I started my journey with the third phase of the California Rework, where Fresno was the first city I had the opportunity to work on. Since then, I've remained part of the Rework team, working on cities across different projects. As part of the Nevada Rework, I'm currently working on Reno and Fallon.
Reno is being completely rebuilt from the ground up, and one of my main goals was to capture the atmosphere and scale of the city. I put a lot of focus on the city's layout, character and recognizable landmarks, while also trying to keep some of the feeling of the original city that players might remember. The area will also feature reworked sections of I-80, which I'm really looking forward to seeing players experience.Β
Fallon is a much smaller city, but its location gives it a character of its own. Surrounded by the vast Nevada desert, it feels almost like a small oasis in the middle of nowhere, with the greenery and farmland around the city standing out against the otherwise dry landscape. There is definitely a lot for players to look forward to, and I hope they'll enjoy exploring these areas as much as I enjoyed working on them.
Tom - Map Designer
I'm doing mainly landscape, and I'm in the rework team since California's 2nd phase; my favourite tasks were forests with mountains and lakes, which I haven't seen in a while.
Luckily, Nevada offers dry mountains and hills providing interesting tall horizons which diversify the barren desert.
Nevada is also unique for long straight roads compared to other DLCs. If you enjoy driving into the distant horizon, you'll most likely enjoy it.
Roman - Map Designer
This October marks my fourth year at SCS. In my time on the ATS rework team, I had the chance to work on multiple phases of the California rework, the Route 66 rework project, and now Nevada. With each rework, I slowly figured out that I enjoy making detailed cities more than anything else, though the cities have never been as large or famous as the one I have been working on now.
Las Vegas has been quite a challenge compared to my previous cities, but it also gives many opportunities for fun detail work and making the city feel alive. I hope that the NEW Vegas is fun to explore for new players and even more fun to re-explore for returning trucking veterans.
Margo - Map Designer
Hi there! Itβs been a ride here in the Rework team since I joined the company in 2022. Every year, a new project brings us something new to work on. I had the pleasure of working on the California rework, parts of Arizona, and now Nevada as well. Reworking Nevada brought me something I already knew and made me rethink my working approach, as my perspective changed a lot through the years.
Creating for me always comes with a deeper meaning to it. I donβt want my work to be just purely mechanical and soulless; I like hiding fun details in the ordinary. If spotting it makes someone smile or catches their attention - itβs worth it.
We really should be cultivating our curiosity and wonder more in our daily lives. So if you are already wondering about the brand new Nevada, thatβs a good starting point. There are many cool places to see and some nice UFO references to spot!
Filip - Map Designer
Hello everybody! My map designer journey began during the fourth phase of the California rework, where I worked on smaller tasks suited for a rookie like me. On the Route 66 rework project, I was responsible for the design of I-191 and Page. I got to experience a bit of everything: a diverse road with settlements, scenic views, beautiful landscapes, and a challenging hilly city.
The experience I gained, I can now utilize in a brand new look of Nevada, where I am working on Carson City, its surroundings, and a small surprise.
I hope the work of our team will bring a fresh, up-to-date look to Nevada and that players will be able to rediscover this awesome state for a second time!
Mykyta - Map Designer
I have been working at SCS Software for two years, and during that time I have worked on projects such as Route 66 around Tucumcari.Β
As part of the Nevada Rework, I am currently working on the towns of Elko and Carlin and their surrounding areas.Β
Players can look forward to driving through the Carlin Tunnel, and if they pay close attention along the way, they may also discover some beautiful and interesting places in the surrounding landscape.Β
Jakub - Map Designer
I have been in SCS for more than a year. I started with reworking the northern part of Arizona and New Mexico. Now, reworking Nevada is another dream project of mine.
As a big fan of clean, big open landscapes and amazing mountains, rocks, and other unique hills, I enjoyed every road I've been working on, and now I am happy that Nevada looks like Nevada.
Rob - Junior Map Designer
Hi everyone, Iβm Rob, and Iβve been with SCS for over a year now. The Nevada Rework is my first major project. Before that, I mainly worked on smaller projects in Arizona.
My part of the map is located in northern Nevada, where Iβve been working to bring the area as close to reality as possible and capture the atmosphere of sun-baked roads stretching through the endless desert. Players can look forward not only to the rugged, arid landscape, but also to beautiful and highly detailed cities.
Iβm happy that we can give players a fresh take on familiar content and offer them the chance to experience Nevada in a slightly different and completely new way.
Filip - Junior Map Designer
Hi, Iβve only been in SCS for four months, but I already feel right at home here. Nevada is a beautiful state, and Iβve really enjoyed exploring it.
I was tasked with completing the road from Las Vegas to Panaca. It was a privilege to work on the surrounding mountain ranges and finish the work started by my colleague Johny. There is also a Visitor Center near Panaca, and I think I managed to capture it in all its beauty. So, Iβd definitely recommend that players take a little detour from the road and explore the area around it.
Samuel - Junior Map Designer
Hi, my name is Sam, and I recently passed the five-month mark at SCS Software. Having grown up playing SCS games, being able to contribute to their development is a dream come true for me.
On this project, I worked on shorter roads in the western part of Nevada. Hopefully, I managed to capture the authentic feel of the landscape, biomes, and unique character of the area, and you'll enjoy driving through them! Iβm really looking forward to showing you even more of my work in future DLCs.
That concludes todayβs Meet the Team! Weβd like to thank everyone featured in this blog for taking the time to share a little about themselves and their work on the Nevada Rework.
We always enjoy giving our community a glimpse behind the scenes and highlighting the talented people who help bring our virtual worlds to life. We hope you enjoyed learning more about the team and the passion theyβre putting into giving Nevada a fresh new look.
The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. The Haiku project has released a new development snapshot of the lightweight, single-user operating system. Haiku R1 Beta 6 introduces support for multiple web browsers and features a port of the NetBSD Virtual Machine Manager (NVMM), which provides hardware virtualization on x86_64 machines. "A few months after the....
Our why as an organization is clear: to fight for privacy, choice, and sustainability for smart homes, and for every person who lives in one. But who does live in them?
In December 2024, we launched the first Home Assistant survey to find out. Our goal was simple: to make Home Assistant more inclusive and approachable by listening directly to the diverse community of people who use it.
In the spirit of building in the open, today weβre thrilled to announce the anonymized results of that survey are now freely available. In this post, weβll run you through what the survey covered, why and how weβre publishing this data, what the data is not (read: identifiable), how weβre using this information to improve what we do, and opportunities for further understanding and research.
macOS: Work around a bug in macOS 27 where setting the locale to non-English triggers crashes in AppKit
SFTP: Improved heuristic when keyboard-interactive requests are treated as a simple password prompt on servers not offering the password authentication method
The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. The Armbian distribution is designed for ARM development boards and a range of other machines. The project's latest release, version 26.8.3, introduces a few key change, including a new system installer. "Most releases are a long list of small improvements. This one had three larger pieces landing at....
A complete revamped Media Library UI is available behind a feature flag. Set future.betaMediaLibrary: true in config/features and restart your app; it replaces the legacy Media Library when enabled (disabled by default). More info in docs and the Notion Page
Feedback while it's behind the flag is very welcome. Enjoy!
π₯ Bug fix
make drag and drop more fluently in configuation view fix#23161 (#26320, #23161)
admin: out of sort memory when listing audit logs on mysql (#27410)
admin: send credentials on fetch client requests (#27413)
admin: keep api token permissions on localized content types at boot (#27420)
admin: honour redirectTo when the auth page redirects an authenticated user (#27213)
admin: slow startup with many roles due to redundant permission β¦ (#27438)
content-manager: draft status filter with i18n sibling locale published (#26835)
content-manager: reject MCP relation writes combining set with connect or disconnect (#27423)
content-manager: out of sort memory when listing history versions on mysql (#27394)
core: Access token rotation fails with asymmetric JWT algorithms (#27201)
core: serialize JSON columns before INSERT in discard-drafts migration (#25927)
core/strapi: local plugins duplicate the admin module graph and exhaust build memory (#27311)
database: relation reorder saves the wrong position (#27444)
i18n: correct broken placeholders in pt-BR translations (#27257, #27383)
permissions: surface clear error for unsupported RBAC condition operators (#27355)
plugins: admin build fails to resolve @strapi/admin under isolated node_modules (#27337)
upload: translate server error codes in the new media library (#27345)
upload: sizeLimit is not enforced when replacing a file (#27414)
upload: move replace media to the drawer footer, add tooltips (#27425)
upload: list queued files in the upload progress dialog (#27416)
upload: merge a second drop into the running upload batch (#27415)
βοΈ Chore
replace lodash forEach with native Object.entries/values (#27409)
graphql: warn about unbounded operation limits (#27390)
upload: deny svg in generated project defaults (#27360)
β οΈ Changes to be aware of
New projects block SVG uploads by default
Apps created with create-strapi-app now reject SVG files in the Media Library by default, because SVG can include active browser content. Existing projects are unchanged; if you need SVG in a new project, allow image/svg+xml in the generated upload security config.
(#27360)
We are pleased to announce the sixth release candidate preview release of Jellyfin 12.0!
This is a preview release, intended for those interested in testing 12.0 before its final public release. We welcome testers to help find as many bugs as we can before the final release.
As always, please ensure you stop your Jellyfin server and take a full backup before upgrading!
A note about versioning
Starting with this release, we are dropping the preceding 10. from our versioning. Thus, 10.11.x -> [10.]12.x = 12.x. The reason is simple: at this point in the project, we don't envision a hard break in the API like we planned way back in the early days, and this version scheme was causing a lot of confusion amongst users about what a "major" release was. For more information, please see the RC1 release notes.
What's new?
The main goal of this release has been performance. 10.11.0 dropped a major backend rewrite, and while it was broadly functional, it had a lot of rough edges. This release seeks to polish out most of those rough edges and bring better performance to all users.
Note: You must be on Jellyfin 10.10.7+ or 10.11.x (ideally, 10.11.11) before upgrading! If you are not, the upgrade will fail. Ensure you upgrade to one of these versions first!
Note: The initial load of Jellyfin 12.x will run a few migrations and will take several minutes. Please be patient and do not interrupt the process. You can leverage the (newly improved!) startup UI on your local network to see specific progress, or off-network to see general progress, by visiting the server URL in your web browser during startup.
Note: If you install the RC, you should disable all external plugins and reinstall using the unstable plugin repository, or plugins may fail to load and cause unintended side effects.
Installing
This preview release is distributed in all our traditional forms, though not automatically via our Apt repository or latest tag.
For all non-Docker environments, you can find the files for manual download in our repository by selecting "Stable Preview" for your OS.
For Docker, you can pull the 12.0-rc6 or preview tags.
We are pleased to announce the sixth release candidate preview release of Jellyfin 12.0!
This is a preview release, intended for those interested in testing 12.0 before it's final public release. We welcome testers to help find as many bugs as we can before the final release.
As always, please ensure you stop your Jellyfin server and take a full backup before upgrading!
A note about versioning
Starting with this release, we are dropping the preceding 10. from our versioning. Thus, 10.11.x -> [10.]12.x = 12.x. The reason is simple: at this point in the project, we don't envision a hard break in the API like we planned way back in the early days, and this version scheme was causing a lot of confusion amongst users about what a "major" release was. For more information, please see the RC1 release notes.
What's new?
The main goal of this release has been performance. 10.11.0 dropped a major backend rewrite, and while it was broadly functional, it had a lot of rough edges. This release seeks to polish out most of those rough edges and bring better performance to all users.
Note: You must be on Jellyfin 10.10.7+ or 10.11.x (ideally, 10.11.11) before upgrading! If you are not, the upgrade will fail. Ensure you upgrade to one of these versions first!
Note: The initial load of Jellyfin 12.x will run a few migrations and will take several minutes. Please be patient and do not interrupt the process. You can leverage the (newly improved!) startup UI on your local network to see specific progress, or off-network to see general progress, by visiting the server URL in your web browser during startup.
Note: If you install the RC, you should disable all external plugins and reinstall using the unstable plugin repository, or plugins may fail to load and cause unintended side effects.
Installing
This preview release is distributed in all our traditional forms, though not automatically via our Apt repository or latest tag.
For all non-Docker environments, you can find the files for manual download in our repository by selecting "Stable Preview" for your OS.
For Docker, you can pull the 12.0-rc6 or preview tags.