Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Enhancement]: Server should display prominent message if ABS server version is too old #3895

Open
ZLoth opened this issue Jan 25, 2025 · 2 comments
Labels
enhancement New feature or request

Comments

@ZLoth
Copy link

ZLoth commented Jan 25, 2025

Type of Enhancement

None

Describe the Feature/Enhancement

As currently designed, the ABS software displays the current version and a update message in the lower-left corner of the screen. However, if that version is several versions too old, then a prominent message should be displayed when the administrator logs into the server if it is more than three major versions old, or a user if the version is more than six versions old. This can also be displayed if there is a potentially show-stopping issue or security issue with the ABS server software. (e.g. The latest version of the mobile app requires a minimum of 2.17.0 to run, but the server is running 2.13.4). Perhaps, as part of a version check, the server will return the minimum required version to run.

Why would this be helpful?

In some implementations (e.g. TrueNAS Scale), the ABS server upgrades are not automatic but require administrator intervention. Some administrators are "set and forget", and let the updates lapse.

Future Implementation (Screenshot)

Perhaps the following texts:

  • SERVER UPDATE REQUESTED! This server is running the 2.13.4 of the Audiobookshelf software which was released xxx days ago. Please update your server to take advantage of the new features (and link to list features after 2.13.4 to current).
  • ADMINISTRATOR INTERVENTION REQUESTED! Please contact your administrator to update the Audiobookshelf software from 2.13.4 (released xxx days ago) to the current version of 2.18.1 .

Audiobookshelf Server Version

2.18.1

Current Implementation (Screenshot)

Image

@ZLoth ZLoth added the enhancement New feature or request label Jan 25, 2025
@mx03
Copy link
Contributor

mx03 commented Feb 3, 2025

Dont understand the issue.

Some administrators are "set and forget", and let the updates lapse.

If you dont care about updates you dont care.

Everyone can subscribe to new releases on GH.

Image

Then you get a mail:

Image

And for automation you can use watchtower.

@ZLoth
Copy link
Author

ZLoth commented Feb 10, 2025

The reason behind this request is related to Lastpass and Plex, and how a attacker exploited a vulnerability in Plex of one of the developers... a vulnerability that was already patched previously.

https://thehackernews.com/2023/03/lastpass-hack-engineers-failure-to.html
https://www.pcmag.com/news/lastpass-employee-couldve-prevented-hack-with-a-software-update
https://www.bleepingcomputer.com/news/security/cisa-warns-of-actively-exploited-plex-bug-after-lastpass-breach/

Because I'm running ABS on TrueNAS Scale with Docker support, I had to modify the settings in System → Alert Settings → Applications just to get the notice that an update is available since updates can take 12-48 hours between the time of release and the time the updated application is posted in TrueNAS Scale, and then, it's a manual update process. Yes, the update is in the lower-left corner, but can be obscured. And, if it is a rarely-used application, it could be months. Thus, having a obvious message saying that it's out of date, please upgrade is requested.

I should note that this "in your face" notification should only occur when there is too much time between updates, and then administrator first before the user.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants