This week in self-hosting: Gitea 1.27.2 is a patch-now security release, rsync 3.5.0 lands a pile of security fixes, Jellyfin 12.0 hits RC5, and a homelab breach postmortem worth your evening.
Gitea's second security release in days, an honest homelab breach postmortem, Jellyfin 12.0 RC5, rsync 3.5.0, QEMU 11.1 — and why a nightly dd mirror isn't a backup.
Jellyfin 12.0 hits RC5, Gitea ships a security-led patch you should install now, and a homelabber's breach postmortem — plus Nextcloud 35 beta, Portainer LTS and n8n 2.35.0.