This release includes 1 security fix for security teams reviewing exposed deployments.
Topics
+4 more
Affected surfaces
ReleasePort's take
Moderate signalThe `gooey`βbased GUI is deprecated and removed; a brand new UI replaces it in v4.0.0.
Why it matters: All users relying on the legacy gooey interface must migrate to the new UI before using v4.0.0, as the old surface is fully discontinued.
Summary
AI summaryBroad release touches Windows, ποΈ Massive Architectural Overhaul, β‘ Performance & Security, and native. Breaking: Deprecated and removed the gooey-based graphical interface; replaced with a brand new UI
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Critical |
Fixed critical E2EE edge case "Unaligned Ranges No Nonce Reuse" to preserve encryption integrity. Fixed critical E2EE edge case "Unaligned Ranges No Nonce Reuse" to preserve encryption integrity. Source: llm_adapter@2026-07-15 Confidence: high |
β |
| Breaking | High |
Deprecated the `gooey`-based GUI; replaced with entirely new modern UI. Deprecated the `gooey`-based GUI; replaced with entirely new modern UI. Source: llm_adapter@2026-07-15 Confidence: high |
β |
| Feature | Medium |
Added `--disable-clipboard` CLI flag to prevent automatic clipboard copying of share links. Added `--disable-clipboard` CLI flag to prevent automatic clipboard copying of share links. Source: llm_adapter@2026-07-15 Confidence: high |
β |
| Feature | Medium |
Unified Share infrastructure so CLI and Daemon mode share the same underlying mechanics. Unified Share infrastructure so CLI and Daemon mode share the same underlying mechanics. Source: granite4.1:30b@2026-07-15-audit Confidence: high |
β |
| Feature | Medium |
Daemon mode now supports `--upload` links, enabling upload functionality in daemon sessions. Daemon mode now supports `--upload` links, enabling upload functionality in daemon sessions. Source: llm_adapter@2026-07-15 Confidence: low |
β |
| Performance | Medium |
Removed unnecessary wait for `/complete` event in chunked HTTP Range downloads, speeding up parallel/resumed transfers. Removed unnecessary wait for `/complete` event in chunked HTTP Range downloads, speeding up parallel/resumed transfers. Source: llm_adapter@2026-07-15 Confidence: high |
β |
| Performance | Low |
Deeply enhanced Jinja2 template integration for better rendering performance and smarter caching. Deeply enhanced Jinja2 template integration for better rendering performance and smarter caching. Source: granite4.1:30b@2026-07-15-audit Confidence: high |
β |
| Bugfix | Medium |
Resolved mDNS detection issue in WebRTC, improving local network peer discovery. Resolved mDNS detection issue in WebRTC, improving local network peer discovery. Source: llm_adapter@2026-07-15 Confidence: high |
β |
| Refactor | Medium |
Refactored monolithic `Server.py` into a modern `views` architecture for better modularity. Refactored monolithic `Server.py` into a modern `views` architecture for better modularity. Source: granite4.1:30b@2026-07-15-audit Confidence: high |
β |
| Refactor | Low |
Renamed `Core.py` to `FFL.py` and moved all build scripts (`Build*`) into the `dist` directory. Renamed `Core.py` to `FFL.py` and moved all build scripts (`Build*`) into the `dist` directory. Source: llm_adapter@2026-07-15 Confidence: high |
β |
| Refactor | Low |
Major refactoring and style corrections applied to critical modules `Readers.py` and `WebRTC.py` for improved maintainability. Major refactoring and style corrections applied to critical modules `Readers.py` and `WebRTC.py` for improved maintainability. Source: granite4.1:30b@2026-07-15-audit Confidence: high |
β |
Full changelog
π What's New in v4.0.0 (Major Release)
Welcome to FastFileLink v4.0.0! This major release marks a massive leap forward. We've completely rewritten the graphical user interface, aggressively refactored our core monolithic architecture into modular components, and patched critical edge cases in performance and security.
π¨ All-New UI & Multi-Share Management
- GUI Completely Rewritten: We have fully deprecated the
gooey-based graphical interface and built a brand new, modern UI from the ground up. (Note: The CLI experience remains unaffected and as powerful as ever). - Multi-Session GUI Management: The new UI now fully leverages our new
daemonarchitecture behind the scenes. This means you can now launch, track, and manage multiple active share sessions simultaneously within a single, unified dashboard! - Jargon-Free Web UI: We've simplified the language on the download pages. Confusing technical terms (like "WebRTC" or "Relay") have been replaced with intuitive, human-friendly wording.
- Clipboard Control: Added the
--disable-clipboardflag for users who prefer the system not to automatically copy generated share links to their clipboard.
ποΈ Massive Architectural Overhaul
- The Death of the Monolith:
Server.pyis no longer one giant file. It has been elegantly refactored into a modernviewsarchitecture. - Component Refactoring: Critical modules including
Readers.pyandWebRTC.pyunderwent major refactoring and style corrections for better maintainability. - Unified Share Architecture: The core
Shareinfrastructure has been completely redesigned. The CLI and the new Daemon mode now share the exact same underlying mechanics. - Daemon Uploads: Building on the unified architecture, Daemon mode now fully supports
--uploadlinks. - Semantic File Reorganization:
Core.pyhas been correctly renamed toFFL.pyto reflect its true purpose, and all build-related scripts (Build*) have been moved to thedistdirectory.
β‘ Performance & Security
- E2EE Cryptography Fix: Patched a critical security edge case related to "Unaligned Ranges No Nonce Reuse" to ensure robust End-to-End Encryption integrity.
- HTTP Range Performance: Resolved a performance bottleneck where chunked Range downloads were unnecessarily waiting for the
/completeevent, significantly speeding up parallel and resumed downloads. - Jinja2 Optimization: Deeply enhanced our Jinja2 template integration, resulting in better rendering performance and smarter caching.
- mDNS Detection: Fixed an issue where WebRTC struggled with
.localmDNS peer detection, improving local network connectivity.
π οΈ Developer & Testing
- Standardized E2E Tests: Test cases have been unified to consistently use
_startFastFileLinkfor rigorous end-to-end testing, ensuring higher code quality for future updates.
Windows (native)
- x86_64 β
ffl-v4.0.0-x86_64-windows.zip
Unzip to getffl.exe.
Linux (native)
We publish two glibc baselines. Pick the highest baseline that does not exceed your system glibc:
-
glibc 2.39+ β smaller & faster
ffl-v4.0.0-manylinux_glibc2.39-x86_64-linux.tar.gz- Best for newer distros (e.g., Ubuntu 24).
-
glibc 2.28+ β widest compatibility
ffl-v4.0.0-manylinux_glibc2.28-x86_64-linux.tar.gz- Works on older distros (e.g., Ubuntu 20); larger due to additional internal linking.
β οΈ If your system is musl-based (e.g., Alpine) or youβre unsure about glibc, prefer APE
ffl.com.
macOS (native)
- Apple Silicon (arm64) β
ffl-v4.0.0-aarch-darwin.tar.gz - Intel (x86_64) β
ffl-v4.0.0-x86_64-darwin.tar.gz
The archive unpacks to a single ffl binary.
π§° APE (cross-platform single file, zero external deps)
ffl.comβ Single-file build that runs natively on Linux, macOS, Windows, FreeBSD, OpenBSD 7.3, NetBSD, BIOS, and Android (Termux).fflo.comβ Alternative APE build that is exactly aligned with the open-source repo (no additional/proprietary addons).
As a result, features that require closed-source componentsβsuch as upload to server (e.g.,--upload)βare not available.
For a deeper comparison between native and APE, see the READMEβs notes.
Breaking Changes
- Deprecated and removed the `gooey`-based graphical interface; replaced with a brand new UI.
- Refactored `Server.py` monolith into a modular `views` architecture.
- Renamed `Core.py` to `FFL.py` and moved all build scripts (`Build*`) to the `dist` directory.
Security Fixes
- Fixed critical E2EE edge case "Unaligned Ranges No Nonce Reuse" to ensure robust encryption integrity.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About FFL
All releases βRelated context
Beta — feedback welcome: [email protected]