Gitea's second security release in days, an honest homelab breach postmortem, Jellyfin 12.0 RC5, rsync 3.5.0, QEMU 11.1 — and why a nightly dd mirror isn't a backup.