Skip to content

FFL

v4.0.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 12d Secrets & Credentials
βœ“ No known CVEs patched
Read the diff β†’ Tool health β†’ What is this tool? β†’
This release patches 1 known CVE

Topics

cosmopolitan-libc data-transfer end-to-end-encryption file-sharing folder-share networking
+4 more
peer-to-peer transfer tunnel webrtc

Affected surfaces

crypto_tls

ReleasePort's take

Moderate signal
editorial:auto 12d

The `gooey`‑based GUI is deprecated and removed; a brand new UI replaces it in v4.0.0.

Why it matters: All users relying on the legacy gooey interface must migrate to the new UI before using v4.0.0, as the old surface is fully discontinued.

Summary

AI summary

Broad release touches Windows, πŸ—οΈ Massive Architectural Overhaul, ⚑ Performance & Security, and native. Breaking: Deprecated and removed the gooey-based graphical interface; replaced with a brand new UI

Changes in this release

Security Critical

Fixed critical E2EE edge case "Unaligned Ranges No Nonce Reuse" to preserve encryption integrity.

Fixed critical E2EE edge case "Unaligned Ranges No Nonce Reuse" to preserve encryption integrity.

Source: llm_adapter@2026-07-15

Confidence: high

β€”
Breaking High

Deprecated the `gooey`-based GUI; replaced with entirely new modern UI.

Deprecated the `gooey`-based GUI; replaced with entirely new modern UI.

Source: llm_adapter@2026-07-15

Confidence: high

β€”
Feature Medium

Added `--disable-clipboard` CLI flag to prevent automatic clipboard copying of share links.

Added `--disable-clipboard` CLI flag to prevent automatic clipboard copying of share links.

Source: llm_adapter@2026-07-15

Confidence: high

β€”
Feature Medium

Unified Share infrastructure so CLI and Daemon mode share the same underlying mechanics.

Unified Share infrastructure so CLI and Daemon mode share the same underlying mechanics.

Source: granite4.1:30b@2026-07-15-audit

Confidence: high

β€”
Feature Medium

Daemon mode now supports `--upload` links, enabling upload functionality in daemon sessions.

Daemon mode now supports `--upload` links, enabling upload functionality in daemon sessions.

Source: llm_adapter@2026-07-15

Confidence: low

β€”
Performance Medium

Removed unnecessary wait for `/complete` event in chunked HTTP Range downloads, speeding up parallel/resumed transfers.

Removed unnecessary wait for `/complete` event in chunked HTTP Range downloads, speeding up parallel/resumed transfers.

Source: llm_adapter@2026-07-15

Confidence: high

β€”
Performance Low

Deeply enhanced Jinja2 template integration for better rendering performance and smarter caching.

Deeply enhanced Jinja2 template integration for better rendering performance and smarter caching.

Source: granite4.1:30b@2026-07-15-audit

Confidence: high

β€”
Bugfix Medium

Resolved mDNS detection issue in WebRTC, improving local network peer discovery.

Resolved mDNS detection issue in WebRTC, improving local network peer discovery.

Source: llm_adapter@2026-07-15

Confidence: high

β€”
Refactor Medium

Refactored monolithic `Server.py` into a modern `views` architecture for better modularity.

Refactored monolithic `Server.py` into a modern `views` architecture for better modularity.

Source: granite4.1:30b@2026-07-15-audit

Confidence: high

β€”
Refactor Low

Renamed `Core.py` to `FFL.py` and moved all build scripts (`Build*`) into the `dist` directory.

Renamed `Core.py` to `FFL.py` and moved all build scripts (`Build*`) into the `dist` directory.

Source: llm_adapter@2026-07-15

Confidence: high

β€”
Refactor Low

Major refactoring and style corrections applied to critical modules `Readers.py` and `WebRTC.py` for improved maintainability.

Major refactoring and style corrections applied to critical modules `Readers.py` and `WebRTC.py` for improved maintainability.

Source: granite4.1:30b@2026-07-15-audit

Confidence: high

β€”
Full changelog

πŸŽ‰ What's New in v4.0.0 (Major Release)

Welcome to FastFileLink v4.0.0! This major release marks a massive leap forward. We've completely rewritten the graphical user interface, aggressively refactored our core monolithic architecture into modular components, and patched critical edge cases in performance and security.

🎨 All-New UI & Multi-Share Management

  • GUI Completely Rewritten: We have fully deprecated the gooey-based graphical interface and built a brand new, modern UI from the ground up. (Note: The CLI experience remains unaffected and as powerful as ever).
  • Multi-Session GUI Management: The new UI now fully leverages our new daemon architecture behind the scenes. This means you can now launch, track, and manage multiple active share sessions simultaneously within a single, unified dashboard!
  • Jargon-Free Web UI: We've simplified the language on the download pages. Confusing technical terms (like "WebRTC" or "Relay") have been replaced with intuitive, human-friendly wording.
  • Clipboard Control: Added the --disable-clipboard flag for users who prefer the system not to automatically copy generated share links to their clipboard.

πŸ—οΈ Massive Architectural Overhaul

  • The Death of the Monolith: Server.py is no longer one giant file. It has been elegantly refactored into a modern views architecture.
  • Component Refactoring: Critical modules including Readers.py and WebRTC.py underwent major refactoring and style corrections for better maintainability.
  • Unified Share Architecture: The core Share infrastructure has been completely redesigned. The CLI and the new Daemon mode now share the exact same underlying mechanics.
  • Daemon Uploads: Building on the unified architecture, Daemon mode now fully supports --upload links.
  • Semantic File Reorganization: Core.py has been correctly renamed to FFL.py to reflect its true purpose, and all build-related scripts (Build*) have been moved to the dist directory.

⚑ Performance & Security

  • E2EE Cryptography Fix: Patched a critical security edge case related to "Unaligned Ranges No Nonce Reuse" to ensure robust End-to-End Encryption integrity.
  • HTTP Range Performance: Resolved a performance bottleneck where chunked Range downloads were unnecessarily waiting for the /complete event, significantly speeding up parallel and resumed downloads.
  • Jinja2 Optimization: Deeply enhanced our Jinja2 template integration, resulting in better rendering performance and smarter caching.
  • mDNS Detection: Fixed an issue where WebRTC struggled with .local mDNS peer detection, improving local network connectivity.

πŸ› οΈ Developer & Testing

  • Standardized E2E Tests: Test cases have been unified to consistently use _startFastFileLink for rigorous end-to-end testing, ensuring higher code quality for future updates.

Windows (native)

  • x86_64 β†’ ffl-v4.0.0-x86_64-windows.zip
    Unzip to get ffl.exe.

Linux (native)

We publish two glibc baselines. Pick the highest baseline that does not exceed your system glibc:

  • glibc 2.39+ β€” smaller & faster

    • ffl-v4.0.0-manylinux_glibc2.39-x86_64-linux.tar.gz
    • Best for newer distros (e.g., Ubuntu 24).
  • glibc 2.28+ β€” widest compatibility

    • ffl-v4.0.0-manylinux_glibc2.28-x86_64-linux.tar.gz
    • Works on older distros (e.g., Ubuntu 20); larger due to additional internal linking.

⚠️ If your system is musl-based (e.g., Alpine) or you’re unsure about glibc, prefer APE ffl.com.

macOS (native)

  • Apple Silicon (arm64) β†’ ffl-v4.0.0-aarch-darwin.tar.gz
  • Intel (x86_64) β†’ ffl-v4.0.0-x86_64-darwin.tar.gz

The archive unpacks to a single ffl binary.

🧰 APE (cross-platform single file, zero external deps)

  • ffl.com β€” Single-file build that runs natively on Linux, macOS, Windows, FreeBSD, OpenBSD 7.3, NetBSD, BIOS, and Android (Termux).
  • fflo.com β€” Alternative APE build that is exactly aligned with the open-source repo (no additional/proprietary addons).
    As a result, features that require closed-source componentsβ€”such as upload to server (e.g., --upload)β€”are not available.

For a deeper comparison between native and APE, see the README’s notes.

Breaking Changes

  • Deprecated and removed the `gooey`-based graphical interface; replaced with a brand new UI.
  • Refactored `Server.py` monolith into a modular `views` architecture.
  • Renamed `Core.py` to `FFL.py` and moved all build scripts (`Build*`) to the `dist` directory.

Security Fixes

  • Fixed critical E2EE edge case "Unaligned Ranges No Nonce Reuse" to ensure robust encryption integrity.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track FFL

Get notified when new releases ship.

Sign up free

Beta — feedback welcome: [email protected]