LibreFang 2026.8.19 Patches Security Holes, Adds Managed Config and Audio Fixes
LibreFang has released version 2026.8.19, incorporating 474 pull requests from five contributors since the previous release on July 31. The update focuses heavily on security, closing path-traversal vulnerabilities, fixing SSRF vectors in link context and webhook callbacks, and tightening auth scoping to prevent non-owners from probing other agents' sessions. A key stability improvement introduces mutex poison recovery across roughly 40 daemon locks, meaning a single panic no longer permanently disables features like metering, routing, or memory for the entire process. On the feature side, the release adds a managed configuration mode suited for Kubernetes deployments, fixes long-form audio transcription that previously dropped recordings exceeding the spill threshold, and introduces Polish as a fully supported language. Performance has also been improved by moving blocking filesystem and database operations off async workers onto a dedicated blocking pool.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Discussion (0)
Log in to join the discussion and vote.
Log in