v1.1.1 v0.53.0
medium risk
Friedrich-M/UniMateSep 26, 2026 → Sep 27, 20261 day between releases
What's New
Adds idle keepalive for RTP and patches siphon-rs/rustls security vulnerabilities
Breaking Changes
- New `[bridge].idle_keepalive` configuration key fails at load if not defined.
New Features
- Idle keepalive configuration (`[bridge].idle_keepalive`) to maintain media flow during silence.
- Prometheus counter `siphon_ai_idle_keepalive_frames_total`.
Improvements
- Security patch for siphon-rs prevents remote panics during header parsing.
- Security patch for rustls addresses TLS 1.3 handshake encryption boundary issues.
Bug Fixes
- Remote panics in siphon-rs header parsing fixed.
- TLS 1.3 handshake encryption boundary issues in rustls fixed.
Upgrade Notes
Add the new `[bridge].idle_keepalive` setting to your configuration. Set the value to 'off', 'silence', or 'comfort_noise' to prevent load failures.
The Two Releases
v1.1.1
OpenMAIC v1.1.1 — Security
Sep 26, 2026· 26 days ago
A security release addressing a Server-Side Request Forgery (SSRF) vulnerability in MinerU Cloud parsing.
Full release notesv0.53.0
v0.53.0
Sep 27, 2026· 25 days ago
Introduces an idle keepalive feature to prevent RTP starvation during silent periods and patches critical security vulnerabilities in `siphon-rs` and `rustls`.
Full release notes