Security Advisory 2023-05-25: Linux

[Q-Droid 989]

Starting thread for assistance with the Security Advisory 2023-05-25.

https://emby.media/support/articles/advisory-23-05.html

Post here for questions and help with the Linux platform.

 

Edited May 26, 2023 by Q-Droid
Adding info

[AP123 13]

Sorry for any delayed response. I'm working and also have several diff things that require my attention, but I appreciate the help. Long story short, I know nothing about linux, ras pi, coding, etc. someone set this up for me. My home PC is windows 11. The ras pi emby was set up through OMV, Yacht, and Portainer. Basically I just didn't want my PC on all the time so the ras pi was the solution. I've tried all the suggested steps to remove these files. helper.dll was not found. embyhelper.dll and the xml files were found but I can't delete them via winscp as it says I'm not the admin, and I couldn't figure out how to do it on Putty. Any specific step by step help would be great. I appreciate other people trying to help but their answers basically don't provide clarity. Someone saying "once you're a superuser then you do this..." doesn't help me because idk how to become a superuser in the first place. I appreciate your time.

[Q-Droid 989]

OMV (Debian) is good since I don't have or use RPi or its own flavors of Linux. Try the steps below and post back if you get stuck anywhere.

For starters get some info: make note of the host path that is mapped to /config for the Emby container from Portainer or Yacht.

SSH into your RPi using Putty.

The command id will show who you are in the shell session:
$ id

Who owns the Emby files?
$ ls -l "host path to config from Portainer"

If the above throws an error, no big deal. You can try to elevate privs:
$ sudo ls -l "host path to config from Portainer"
Enter the password you used to login with Putty.

If that works time to look for the files of interest:
$ sudo find "host path to config from Portainer" | grep -iE 'helper.dll|embyhelper.dll|readystate.xml|embyscripterx.xml'

Then follow the Actions listed in the Security Advisory.

To remove the files use the full path returned for each one from the find command above:
$ sudo rm "path to file"
 

[AP123 13]

I will try this as soon as possible and report back. Thank you.

[AP123 13]

2 hours ago, Q-Droid said:

 

Who owns the Emby files?
$ ls -l "host path to config from Portainer"

 

This is as far as I can get. I type this command in and it says "-bash: syntax error near unexpected token '|' "

[slevin7 86]

its an L not an i  

[AP123 13]

Didn’t use an I I was using the symbol above the slash. I’ll try again

[AP123 13]

"cannot access host path to config from portainer: no such file or directory"

Edited May 26, 2023 by AP123

[AP123 13]

Ok so some progress has been made. I think I was able to finally figure out how to elevate my permissions on WinSCP, because NOW when I search for the xml file I was previously getting error code 3 invalid permissions, but now it's giving me error code 2 saying "no such file" which makes no sense because it's searching and finding the file, yet when I try to delete it then it says no file..... how odd. 

 

Edit:I figured out why it said no file found. The first time I clicked delete it apparently was deleted but it doesn't disappear from the search window, so I tried to delete it again and it was already gone. Ok.... so far some progress after over 24 hours. 

Edited May 26, 2023 by AP123

[AP123 13]

I can finally access my emby again! I just need to change all passwords but please tell me how to disable external network access before I change the pw's! I'm so friggin close.

[AP123 13]

So I changed all my passwords and I'm fairly confident I mistyped my new password because it's telling me when I log in that it's incorrect. I'm logged in now but I can't reset it.

[Q-Droid 989]

47 minutes ago, AP123 said:

Didn’t use an I I was using the symbol above the slash. I’ll try again

It's not a | (pipe), it's a lower case L.

[Q-Droid 989]

Were you entering the strings literally as I posted them? Those strings were meant to contain the values from the previous steps.

But no matter. It sounds like you've got it going again.

[AP123 13]

Just now, Q-Droid said:

Were you entering the strings literally as I posted them? Those strings were meant to contain the values from the previous steps.

But no matter. It sounds like you've got it going again.

I'm up and running just have two issues. I messed up my pw so I'd love to know how to fix it, and also I don't know how to update the server. if you could help with these two things I think I'm all set

[Q-Droid 989]

Which password? 

To update Emby from Portainer you can pull/download the new image then recreate the container.
1. From Portainer, click on the Emby container.
2. Stop the container, wait until stopped.
3. Click on recreate.
4. Enable the "Pull latest image" toggle, then recreate.
5. Start the container.
 

[AP123 13]

2 minutes ago, Q-Droid said:

Which password? 

To update Emby from Portainer you can pull/download the new image then recreate the container.
1. From Portainer, click on the Emby container.
2. Stop the container, wait until stopped.
3. Click on recreate.
4. Enable the "Pull latest image" toggle, then recreate.
5. Start the container.
 

I don't have a recreate option. Dude I'm so close to done I will literally pay you if you take my cell number and give me a call and just walk me through this last part. 

[Q-Droid 989]

Can't recreate? That leads me to believe you are not using an administrator account in Portainer.  I haven't used Yacht but do you know if you have the ability to recreate there? If not AND you don't know the administrator account for either then there isn't much more that I can offer. 

See if you can view the Users in Portainer and if you can login as an administrator.

 

 

[AP123 13]

1 minute ago, Q-Droid said:

Can't recreate? That leads me to believe you are not using an administrator account in Portainer.  I haven't used Yacht but do you know if you have the ability to recreate there? If not AND you don't know the administrator account for either then there isn't much more that I can offer. 

See if you can view the Users in Portainer and if you can login as an administrator.

 

 

I'm definitely signed in as the admin. I can see all the containers and users and everything. Seriously I have no problem sending you a venmo if you can hop on the phone and help me out. 

[Q-Droid 989]

Can you PM a screen capture from your Portainer console showing the Emby container Actions bar and Status? You can use the Windows Snipping Tool or Snip & Sketch to grab only the portion you want to show/send.

 

[AP123 13]

4 minutes ago, Q-Droid said:

Can you PM a screen capture from your Portainer console showing the Emby container Actions bar and Status? You can use the Windows Snipping Tool or Snip & Sketch to grab only the portion you want to show/send.

 

done