hollo

v0.9.2 Bugfix

This release fixes issues for SREs watching stability and regressions.

Published 9d Communication & Email

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

activitypub fediverse microblog

Summary

AI summary

Fixed media proxy returning 404 for valid remote media mislabeled as application/octet-stream or binary/octet-stream by sniffing magic bytes.

Type	Severity	Summary	CVE
Bugfix	Medium	Fixes media proxy returning 404 for valid remote media with octet-stream MIME types. Fixes media proxy returning 404 for valid remote media with octet-stream MIME types. Source: llm_adapter@2026-05-25 Confidence: low	—
Bugfix	Low	Media proxy now sniffs magic bytes to determine correct MIME type for octet-stream payloads. Media proxy now sniffs magic bytes to determine correct MIME type for octet-stream payloads. Source: granite4.1:30b@2026-05-25-audit Confidence: low	—

Full changelog

Released on May 25, 2026.

Fixed a bug where the media proxy returned 404 Not Found for remote media whose upstream server labeled the payload as application/octet-stream or binary/octet-stream even though the bytes were valid image, video, or audio data. The proxy now sniffs magic bytes to recover the real MIME type in these cases. [#498]

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track hollo

Get notified when new releases ship.

About hollo

Federated single-user microblogging software