Every daily brief Freedom.Tech has published. 188 editions so far.
4 security patches: Taproot Assets 0.8.7, FreshRSS 1.30.4, Karakeep 0.34.1, Coolify 4.0.1; Plus 45 other releases across the desk
1 security patch: Bitkey App 2026.16.1; 33 releases: 13 Privacy, 11 AI, 4 Nostr, 3 Bitcoin
23 releases: 8 AI, 6 Self-hosting, 5 Privacy, 3 Bitcoin
16 releases: 7 AI, 4 Self-hosting, 3 Nostr, 1 Privacy
The week's dominant signal was a privacy-tooling refresh cycle rather than a single crisis: Tor Browser 15.0.25, Mullvad Browser 15.0.25, Tails 7.15, and haveno 1.11.0 all rolled out the same underlying Tor security fixes within a four-day span, while a 16.0a14 alpha already points at the next cut. Bitcoin's 24 stories
1 security patch: Pi-hole 6.5; 15 releases: 10 AI, 2 Privacy, 2 Nostr, 1 Self-hosting
37 releases: 15 AI, 9 Privacy, 6 Bitcoin, 4 Self-hosting
41 releases: 17 AI, 12 Privacy, 6 Self-hosting, 4 Nostr
1 security patch: Bisq 2 2.1.14; 35 releases: 16 AI, 6 Bitcoin, 6 Privacy, 4 Self-hosting
2 security patches: JoinMarket-NG 0.41.0, Bitkey App 2026.16.0; 32 releases: 16 AI, 9 Privacy, 3 Self-hosting, 2 Bitcoin
26 releases: 8 AI, 6 Privacy, 5 Nostr, 4 Bitcoin
22 releases: 9 AI, 5 Nostr, 4 Privacy, 2 Self-hosting
Four self-hosting staples shipped "patch now" security fixes in a tight three-day window: Duplicati 2.4.0.1, Radicale 3.8.3, Vaultwarden 1.37.4, and FreshRSS 1.30.1. That is a different shape than last week's cross-stack patch wave. This time the cluster sits entirely inside the self-hosted application layer, backup, c
17 releases: 7 AI, 4 Privacy, 3 Bitcoin, 2 Nostr
2 security patches: ZEUS 13.2.3-rc1, Uptime Kuma 2.5.6; 23 releases: 9 AI, 5 Bitcoin, 4 Self-hosting, 3 Nostr
32 releases: 13 AI, 8 Privacy, 6 Bitcoin, 4 Self-hosting
1 security patch: Radicale 3.8.3; 38 releases: 13 AI, 10 Self-hosting, 9 Privacy, 3 Nostr
38 releases: 15 AI, 8 Privacy, 7 Bitcoin, 6 Self-hosting
3 security patches: Vaultwarden 1.37.4, FreshRSS 1.30.1, Bitkey App 2026.13.0; Plus 36 other releases across the desk
Releases: Grain 0.8.0, Qwen Code 0.24.7-nightly.., vLLM 0.31.0, InvokeAI 7.0.0, Radar 1.0.8, llama.cpp b11405
Four "patch now" releases landed in a single stretch, touching four different trust boundaries: a Bitcoin wallet gateway (openclaw 2026.8.34), a router's management interface (StartOS StartWRT 1.2.1), a decentralized exchange client (Bisq 1.10.9, fixing audit findings plus a Tor bump), and a Lightning mobile wallet wit
17 releases: 5 Privacy, 5 Nostr, 4 AI, 2 Bitcoin
24 releases: 10 AI, 5 Bitcoin, 5 Privacy, 2 Self-hosting
2 security patches: openclaw 2026.8.34, StartOS StartWRT 1.2.1; 28 releases: 10 AI, 7 Privacy, 6 Bitcoin, 4 Nostr
1 security patch: Bisq 1.10.9; 31 releases: 11 AI, 8 Privacy, 6 Bitcoin, 4 Self-hosting
1 security patch: OpenAI Daybreak signals a new era for AI security and the critical role of hardware security keys; 27 releases: 14 AI, 8 Privacy, 3 Self-hosting, 2 Nostr
1 security patch: openclaw 2026.8.33; 28 releases: 8 AI, 6 Bitcoin, 5 Privacy, 5 Self-hosting
15 releases: 5 AI, 4 Nostr, 3 Self-hosting, 2 Bitcoin
Three patch-now releases cut across different stacks. Stirling-PDF 3.0.1 fixed Windows-specific regressions introduced in its major release. openclaw 2026.7.35 shipped as a gateway-only extended-stable patch. Navidrome 0.64.2 and Core Lightning 26.06.8 both landed bug fixes, the latter patching responsibly disclosed vu
1 security patch: Stirling-PDF 3.0.1; 12 releases: 4 Privacy, 4 AI, 3 Nostr, 1 Bitcoin
17 releases: 7 Privacy, 6 AI, 2 Self-hosting, 2 Bitcoin
2 security patches: Stirling-PDF 3.0.0, Navidrome 0.64.2; 23 releases: 12 AI, 4 Bitcoin, 4 Privacy, 2 Nostr
32 releases: 15 AI, 9 Privacy, 3 Bitcoin, 3 Nostr
32 releases: 15 AI, 7 Privacy, 5 Nostr, 4 Bitcoin
2 security patches: openclaw 2026.7.35, Navidrome 0.64.1; 33 releases: 14 AI, 11 Privacy, 5 Nostr, 2 Self-hosting
Releases: Qwen Code 0.24.2, ESP-Miner 2.15.3, Bitcoin Knots 29.4.2, Ditto 2.39.2, Mostro CLI 0.16.2, Proton Pass CLI 2.4.0
The week pivoted on two coordinated Bisq security patches, one for v2.1.13 integrating the latest Tor release and one for v1.10.8 fixing audit-identified vulnerabilities, both flagged as patch-now. AI activity again outpaced Bitcoin 47 to 26 stories, but the weight was incremental: Qwen Code and llama.cpp each shipped
16 releases: 7 AI, 4 Privacy, 3 Nostr, 1 Bitcoin
23 releases: 8 Privacy, 8 AI, 4 Bitcoin, 2 Nostr
31 releases: 12 AI, 7 Privacy, 5 Nostr, 4 Bitcoin
1 security patch: Bisq 1.10.8; 25 releases: 8 Self-hosting, 7 Privacy, 6 AI, 4 Bitcoin
1 security patch: Bisq 2 2.1.13; 33 releases: 11 Privacy, 9 AI, 8 Bitcoin, 4 Self-hosting
24 releases: 13 AI, 4 Bitcoin, 3 Self-hosting, 3 Privacy
12 releases: 5 AI, 3 Privacy, 2 Self-hosting, 1 Bitcoin
The week shipped two coordinated gateway security patches across Fedimint branches 0.11.3 and 0.12.1, both addressing LNv1 payment bugs and hardening LNv2, LND, and LDK backends. AI activity dominated the beat count again, 49 stories versus Bitcoin's 22, but much of it landed in incremental build releases: llama.cpp pu
11 releases: 5 AI, 2 Bitcoin, 2 Privacy, 1 Nostr
19 releases: 7 AI, 5 Bitcoin, 3 Self-hosting, 2 Privacy
25 releases: 11 AI, 5 Bitcoin, 4 Self-hosting, 4 Privacy
24 releases: 13 AI, 6 Privacy, 3 Self-hosting, 1 Nostr
28 releases: 11 Privacy, 9 AI, 3 Nostr, 3 Self-hosting
19 releases: 9 AI, 6 Bitcoin, 2 Privacy, 1 Self-hosting
10 releases: 4 AI, 3 Privacy, 2 Nostr, 1 Bitcoin
The week shipped three operator-critical patches across different corners of the privacy stack. ZEUS 13.2.1 arrived with BOLT 12 fixes, Boltcard hardening, and further security measures. Nunchuk Android 2.8.5 added Bitbox Bluetooth and USB support alongside Krux integration and emergency push notification infrastructur
11 releases: 6 AI, 2 Bitcoin, 2 Privacy, 1 Nostr
28 releases: 9 AI, 7 Nostr, 4 Bitcoin, 4 Self-hosting
32 releases: 10 Privacy, 10 AI, 6 Bitcoin, 4 Self-hosting
2 security patches: ZEUS 13.2.1, Nunchuk Android 2.8.5; 31 releases: 11 AI, 8 Bitcoin, 6 Privacy, 3 Self-hosting
1 security patch: Path to Astra: critical capabilities and frontier safeguards; 28 releases: 13 AI, 6 Privacy, 5 Nostr, 2 Self-hosting
13 releases: 5 Bitcoin, 3 AI, 2 Self-hosting, 2 Privacy
Releases: lnd 0.21.3-beta.rc1, lnd 0.20.4-beta.rc1, Vector 0.4.4-2, Sidecar 1.11.0, Rx Nostr 3.7.6, llama.cpp b10712
The week logged three "Patch now" privacy releases that shared a common signal: unpatched vulnerabilities carried over from external audits, disclosed CVEs, or prior release cycles. JoinMarket-NG 0.37.1 shipped multiple fixes and security hardening, Wasabi Wallet 2.8.2 followed as a pre-release, and Bisq 1.10.7 arrived
1 security patch: Wasabi Wallet 2.8.2; Releases: ngit-cli 3.0.0-rc.3, Anthropic Sdk Python 1.2.0, JoinMarket-NG 0.38.0, Gitea 1.27.3, KeePassDX 🥷 Harmonious Ninja (Beta06), age 1.3.2
Releases: Immich 3.2.0-rc.1, Mullvad Browser 16.0a10, Cashu TS 4.10.0, llama.cpp b10677, koboldcpp 1.120, Stack Wallet mwebd 0.1.19; News: Core Lightning 26.06.7
11 releases: 7 AI, 2 Bitcoin, 2 Privacy
1 security patch: Portainer 2.39.7; 18 releases: 7 AI, 4 Bitcoin, 3 Privacy, 2 Nostr
16 releases: 6 AI, 5 Privacy, 2 Bitcoin, 2 Self-hosting
11 releases: 4 AI, 3 Bitcoin, 3 Privacy, 1 Nostr
10 releases: 3 Privacy, 3 AI, 2 Nostr, 1 Self-hosting
The week carried two severity waves. Four high-priority releases shipped without disclosed CVEs: Ride The Lightning 0.15.11-beta opened a public vulnerability channel and closed a credential-crossing race, Bisq 1.10.6 and Bisq 2 2.1.12 both patched vulnerabilities identified in an external audit, and Aqua Wallet 0.5.2
Releases: Ollama 0.33.0, Ashigaru Desktop 1.3.0, Amethyst 1.14.0, Qwen Code 0.22.0, Ashigaru Desktop 1.4.1, llm CLI 0.33
1 security patch: Bisq 2 2.1.12; 15 releases: 6 Privacy, 6 AI, 2 Bitcoin, 1 Nostr
13 releases: 5 AI, 4 Bitcoin, 3 Privacy, 1 Nostr
1 security patch: Bisq 1.10.5; 21 releases: 7 Privacy, 7 AI, 3 Self-hosting, 3 Bitcoin
2 security patches: Ride The Lightning 0.15.11-beta, Pacing model development in an era of cyber-critical capabilities; 14 releases: 6 Privacy, 6 AI, 1 Bitcoin, 1 Self-hosting
1 security patch: Funding internet freedom together: results from our first participatory funding round; 15 releases: 6 Privacy, 5 AI, 2 Bitcoin, 1 Nostr
1 security patch: Aqua Wallet 0.5.2; 11 releases: 5 AI, 4 Bitcoin, 1 Privacy, 1 Nostr
The week split into two clusters. Privacy-focused mobile clients shipped hardening and UX polish across multiple platforms, Blockstream Green Android 5.6 added manual coin selection and stuck swap recovery, Amber 6.5.1 fixed NIP-46 connection re-encryption during key rotation, and Thunderbird for Android 22.0 added an
Releases: RoboSats 0.8.6-alpha, NewPipe Extractor 0.26.5, KeePassDX 🥷 Prolonged Ninja (Beta04), NewPipe 0.29.1, Delta Chat Desktop 2.59.0, llama.cpp b10448
13 releases: 5 AI, 4 Bitcoin, 2 Nostr, 1 Privacy
21 releases: 10 AI, 4 Privacy, 3 Bitcoin, 2 Nostr
19 releases: 9 Bitcoin, 4 Nostr, 3 AI, 2 Privacy
2 security patches: Blockstream Green Android 5.6.0, Bitkey App 2026.11.2; 19 releases: 10 AI, 4 Bitcoin, 2 Self-hosting, 2 Privacy
1 security patch: Expanding Daybreak as the Cyber Defense Window Narrows; Releases: Thunderbird for Android 22.0, Hugging Face Transformers Release 5.15.0, Thunderbird for Android Thunderbird Beta 23.0b1, vLLM 0.27.0, llama.cpp b10356, Passport Prime 1.3.1; News: Putting frontier cyber models in more trusted hands
Releases: cln-nip47 0.2.0, Specter Desktop 2.2.0-pre1, linkding 1.46.0, Specter Desktop 2.1.11
Three actively exploited vulnerabilities dominated the first half of the week. Tails 7.10.1 patched CVE-2026-64560 in the Linux kernel and expat library, BTCPay Server 2.4.2 shipped a critical fix for an exploit already in the wild, and Bitcoin Knots 29.4 delivered safeguards across the board. Qwen Code 0.21.8 restored
Releases: lnd 0.21.2-beta.rc1, MeshCore Companion Firmware 1.17.0, MeshCore Room Server Firmware 1.17.0, lnd 0.20.3-beta.rc1, llama.cpp b10331, llama.cpp b10329
2 security patches: BTCPay Server 2.4.2, Bitwarden Android Password Manager 2026.7.1; 12 releases: 5 AI, 4 Privacy, 2 Nostr, 1 Self-hosting
1 security patch: Bitcoin Knots 29.4; Releases: BitBoxApp 4.51.4, llama.cpp b10293, Stirling-PDF 2.14.3, Anthropic Sdk Go 1.62.0, Kimi Code 0.34.0
1 security patch: Tails 7.10.1; 19 releases: 9 Privacy, 8 AI, 1 Self-hosting, 1 Bitcoin
19 releases: 8 AI, 7 Privacy, 3 Bitcoin, 1 Self-hosting
1 security patch: The ‘Air-Gap Conundrum’: When Password Managers Meet the Data Center Floor; 14 releases: 5 AI, 4 Bitcoin, 3 Self-hosting, 2 Privacy
Releases: Actual Budget 26.8.0, Jellyfin 12.0, llamafile 0.10.5, Jumble 26.8.1, llama.cpp b10236, llama.cpp b10232
The week opened with a multi-project security push. Bitcoin Optech Newsletter 416 flagged a severe COLDCARD wallet-generation vulnerability, Bisq shipped 1.10.4 to resolve audit-identified issues, and n8n 2.33.3 addressed security-audit risk-reporter imports. Vaultwarden 1.37.1 patched invitation breakage introduced
Releases: koboldcpp 1.118.1, NanoClaw 2.1.54, Fedimint Web Canary Release, Liana Business v1.0rc2, Karakeep 0.33.1, llama.cpp b10219
1 security patch: Bitcoin Optech Newsletter; 10 releases: 5 AI, 3 Bitcoin, 1 Self-hosting, 1 Privacy
1 security patch: AdGuard Home 0.108.0-b.90; 12 releases: 7 AI, 4 Bitcoin, 1 Nostr
11 releases: 3 Nostr, 3 Self-hosting, 3 AI, 1 Privacy
18 releases: 7 Privacy, 5 AI, 2 Nostr, 2 Bitcoin
16 releases: 5 Bitcoin, 5 AI, 4 Privacy, 2 Self-hosting
1 security patch: OpenWrt 24.10.8; Releases: Delta Chat Desktop 2.57.0, Maple 3.3.0, llama.cpp b10144
July's fourth week delivered a coordinated patch wave across password management, messaging, and self-hosting stacks. Bitwarden shipped version 2026.7.0 across all clients, iOS, Android, browser, server, and authenticator, requiring companion server updates and forcing Vaultwarden operators to upgrade to 1.37.0 or risk
Releases: Delta Chat Desktop 2.56.0, Bitwarden iOS Authenticator 2026.7.0, vLLM 0.26.0, LNDg 1.11.0, Nostur 1.30.0, Paperless-ngx 3.0.3
3 security patches: Bitwarden iOS Password Manager 2026.7.0, Vaultwarden 1.37.0, Bitwarden Android Password Manager 2026.7.0; Plus 12 other releases across the desk
2 security patches: Invidious 2..0, Bisq 1.10.4; 15 releases: 6 Bitcoin, 5 AI, 3 Privacy, 1 Self-hosting
16 releases: 5 AI, 5 Privacy, 4 Bitcoin, 2 Self-hosting
2 security patches: Element Android 1.6.62, Bitwarden Server Version 2026.7.0; 22 releases: 9 AI, 5 Privacy, 3 Nostr, 3 Bitcoin
1 security patch: Cake Wallet 6.3.0; 14 releases: 6 Privacy, 3 Bitcoin, 3 AI, 2 Nostr
2 security patches: Ride The Lightning 0.15.9-beta, Vulnerability Disclosure: Twin Memory Exhaustion DoS Vulnerabilities in Core Lightning; Releases: Qwen Code 0.20.0, Kimi Code 0.28.0, Bitcoin Safe 2.1.0, Radicale 3.7.7
Gitea 1.27.0 forced the week's pace. The self-hosted forge shipped breaking changes to reusable Actions workflows, enforced Content-Security-Policy script nonces, and bundled multiple security hardening patches flagged for immediate operator attention. BorgBackup 1.4.5 followed hours later with a low-severity security
1 security patch: BorgBackup 1.4.5; Releases: Trilium 0.104.0, Yattee 2.0.0-beta.264, llama.cpp b10068, llama.cpp b10067
10 releases: 5 AI, 2 Nostr, 2 Privacy, 1 Bitcoin
13 releases: 7 AI, 3 Privacy, 2 Bitcoin, 1 Self-hosting
23 releases: 8 AI, 7 Privacy, 4 Bitcoin, 4 Self-hosting
Releases: XSAs released on 2026-07-14, Ditto 2.31.0, llama.cpp b10015, llama.cpp b10012
2 security patches: Gitea 1.27.0, Bitkey App 2026.11.0; 26 releases: 11 Privacy, 6 AI, 4 Self-hosting, 3 Nostr
Releases: Sprout Buzz Desktop 0.4.1, Syncthing macOS for 2.1.2-1, llama.cpp b9977, Navidrome 0.63.2, n8n beta, N8n 2.30.3
The week delivered a coordinated hardware security push and a scattered maintenance wave. BitBox02 forced a bootloader update to v1.2.2 via firmware 9.26.2, Pi-hole 6.4.3 closed a local privilege-escalation path from the pihole user to root, Bisq 1.10.3 shipped a trade-protocol validation fix flagged during an ongoing
Releases: Divine 1.0.16, Ashigaru Desktop 1.1.0, vLLM 0.25.0, Am I Exposed 0.35.8, Hugging Face Transformers Patch 5.13.1, llama.cpp b9968; News
13 releases: 5 Bitcoin, 4 AI, 2 Nostr, 2 Privacy
1 security patch: OpenAI mandates hardware-backed passkeys for Trusted Access Cyber members to log into ChatGPT accounts; 18 releases: 7 AI, 6 Privacy, 5 Nostr
2 security patches: BitBox02 Firmware 9.26.2, SecureDrop 2.16.1; 16 releases: 6 Privacy, 6 Bitcoin, 4 AI
13 releases: 7 Privacy, 4 AI, 1 Bitcoin
2 security patches: Bisq 1.10.3, Case Study Government of Alberta uses Claude to find and fix cybersecurity vulnerabilities across government systems; 15 releases: 8 Privacy, 5 AI, 1 Bitcoin, 1 Nostr
Releases: restic 0.19.1, langchain-mistralai== 1.1.6, langchain-openrouter== 0.2.6, llama.cpp b9878
The week split cleanly in two. A single Tor Browser vulnerability forced a coordinated patch wave across the freedom-tech stack: Tails 7.9.1 shipped CVE-2026-43503 and CVE-2026-46331 on July 2, and the Tor Project published alpha 16.0a8 the following day. That was the week's only Patch-now signal. Elsewhere, privacy
One update today: llama.cpp b9873
1 security patch: StartOS start-cli 1.0.0; 12 releases: 6 AI, 4 Privacy, 1 Nostr, 1 Bitcoin
11 releases: 3 Bitcoin, 5 Privacy, 1 Nostr
1 security patch: Tails 7.9.1; 12 releases: 5 AI, 3 Nostr, 2 Privacy, 2 Bitcoin
22 releases: 10 Privacy, 6 AI, 5 Bitcoin
15 releases: 7 AI, 4 Privacy, 4 Bitcoin
Releases: uBlock Origin 1.72.0, Core Lightning 26.06.2, Signet 1.20.0, llama.cpp b9833, llama.cpp b9835, Kimi Code 0.20.2
The week carved a clean two-part shape: defensive infrastructure responded to one serious vulnerability, and the AI segment drowned the signal with volume, 51 AI items, most of them incremental. SecureDrop 2.16.0 shipped on June 24 carrying CVE-2026-50000, the only Patch-now advisory in the set. Privacy infrastructure i
Releases: Invidious 2..0, Wasabi Wallet 2.8.0, koboldcpp 1.116, llama.cpp b9825, Nostur 509, llama.cpp b9829
11 releases: 5 AI, 3 Nostr, 2 Privacy, 1 Bitcoin
20 releases: 10 Privacy, 6 AI, 2 Nostr, 1 Bitcoin
1 security patch: SecureDrop 2.16.0; 16 releases: 9 Privacy, 5 AI, 1 Bitcoin
Releases: JoinMarket-NG 0.33.0, ComfyUI 0.26.0, Mostro CLI 0.16.0, llama.cpp b9777, Jan 0.8.3, LocalAI 4.5.0; News: Anthropic Sdk Java 2.43.0, Rslearn 0.1.10, Cloud storage email scams: How to spot them and what to do, Client Ts typescript 2.3.0
12 releases: 8 Privacy, 2 Bitcoin, 2 AI
Releases: nostream 3.0.0, Tuta 352.260618.0, Cashu TS 4.6.0, Ledger Live Mobile 4.9.0, llama.cpp b9752, Delta Chat Desktop 2.53.0; News: Samsung Electronics brings ChatGPT and Codex to employees
The LND zero-timestamp gossip DoS disclosure dominated the defensive signal this week. No other CVEs followed. Privacy infrastructure iterated quietly: Vanadium tracked Chromium to 149.0.7827, Cashu CDK 0.17.1 fixed proof handling for inactive keysets, and Immich released RC2 for v3.0. AI volume reached 49 items, mostl
Releases: haveno 1.8.0, Joplin 3.6.15, Mostrix 0.2.1, Nextcloud iOS Version 33.0.10, DAVx5 4.5.15-ose, llama.cpp b9739; News: Claude Agent Sdk Python 0.2.106
Releases: ESP-Miner 2.14.1, Nostr VPN Release nostr-vpn 4.0.80, KeePassDX 🥷 Flexible Ninja (Beta01), Logseq Desktop app Nightly Release, llama.cpp b9732, llama.cpp b9733; News: Hermes Agent 0.17.0
1 security patch: LND: Zero-Timestamp Gossip DoS disclosure; 10 releases: 5 Privacy, 2 AI, 1 Nostr
12 releases: 3 AI, 6 Privacy, 1 Nostr
17 releases: 6 AI, 5 Nostr, 5 Privacy
15 releases: 6 Privacy, 5 AI, 2 Nostr, 1 Bitcoin
Releases: Blockstream Green iOS 5.5.0, Tuta 351.260612.0, Keystone 3 2.4.6, Notesnook Android 3.4.0-beta.1, llama.cpp b9642; News: Qwen Code desktop 0.0.4, Elevenlabs Python 2.53.0
Privacy volume held steady at 58 items while AI delivered 52 and Lightning produced just 7. No CVEs arrived this week. The clustering tells the story: incremental iteration across privacy tooling, Vanadium tracking Chromium, Cashu CDK migrating databases, Bitwarden removing feature flags, while AI infrastructure continue
Releases: Syncthing-Fork Android 2.1.2, Radicale 3.7.5, llama.cpp b9628, KeePassDX 🪄 Magikey, llama.cpp b9630
12 releases: 7 Privacy, 5 AI
13 releases: 5 Nostr, 4 Privacy, 2 AI, 1 Bitcoin
15 releases: 5 AI, 4 Privacy, 3 Nostr, 2 Bitcoin
28 releases: 13 Privacy, 7 AI, 3 Bitcoin, 2 Nostr
10 releases: 6 Privacy, 2 AI, 1 Bitcoin
Releases: Signet 1.10.0, Payjoin Dev Kit Release payjoin 1.0.0-rc.3, Blockstream Green Android 5.5.0, ownCloud Android 4.8.1, NYM Chat 3.69.459, Ditto 2.21.0; News: Anthropic Sdk Python 0.106.0,, Anthropic Sdk Java 2.36.0, Why business data security is a growth issue, not just a tech problem
Four CVE-flagged releases arrived early in the week, three shipping urgent patches before the rest of the cadence arrived. AdGuard Home 0.108.0-b.88 disclosed CVE-2026-41448, Tails 7.8.1 carried a kernel and Tor client fix under CVE-2026-43503, HiveTalk SFU removed ngrok for CVE-2025-57282, and Ledger Live Desktop 4.6
Releases: ZEUS 13.1.0-beta1, Bitcoin Safe 2.0, Logseq Desktop app Nightly Release, Shockwallet 0.0.28-beta, Notesnook Android 3.3.25, Ditto 2.20.0; News: Anthropic Sdk Go 1.47.0
1 security patch: New Executive Order on AI: Identity as a critical foundation for trusted AI; 10 releases: 3 Privacy, 3 AI, 2 Bitcoin, 2 Nostr
3 security patches: Tails 7.8.1, Ledger Live Desktop 4.6.1, EFF Testifies to Congress on Protecting Americans’ Rights from Government AI; Plus 12 other releases across the desk
1 security patch: Cline 3.87.0; 17 releases: 6 Privacy, 6 AI, 3 Nostr, 1 Bitcoin
1 security patch: AdGuard Home 0.108.0-b.88; 12 releases: 4 AI, 3 Bitcoin, 4 Privacy
2 security patches: HiveTalk SFU 0.0.5, Bitkey App 2026.10.0; 17 releases: 8 Privacy, 4 AI, 3 Bitcoin, 2 Nostr
Releases: Cashu 0.20.1, Bitwarden iOS Password Manager 2026.5.0, Bitwarden iOS Authenticator 2026.5.0, openclaw 2026.6.1-beta.1, llama.cpp b9444
The week was dominated currents: a high-urgency OAuth-binding vulnerability in Miniflux and a step-function model release from Anthropic. Miniflux 2.3.1 arrived flagged Patch now for an account-hijack vector in its OAuth implementation, placing it alongside Bitcoin Optech's disclosure of a remote Core Lightning
Three updates today: Jumble 26.5.7, llama.cpp b9442, llama.cpp b9434
1 security patch: Bitcoin Optech Newsletter; 12 releases: 6 AI, 4 Privacy, 2 Bitcoin
Releases: LibreTube 31.4, Bitwarden Clients Web 2026.5.0, Bitwarden Server Version 2026.5.0, Ledger Live Mobile 4.6.0, langchain-anthropic== 1.4.4, Radicale 3.7.4; News: Hermes Agent 0.15.1, Qwen Code 0.17.0, Introducing Claude Opus 4.8, Discord planned to introduce age verification worldwide – and it's about to go live
11 releases: 4 AI, 6 Privacy, 1 Bitcoin
12 releases: 7 Privacy, 4 AI, 1 Bitcoin
10 releases: 3 AI, 2 Bitcoin, 2 Privacy, 2 Nostr
Releases: LocalAI 4.3.1, haveno 1.6.0, Bisq 2 2.1.11, Mostrix 0.2.0, dnscrypt-proxy 2.1.16, Nostur 497
Three network-adjacent security patches anchored the week. AdGuard Home shipped stable release 0.107.75 and beta 0.108.0-b.86, both flagged for immediate deployment. FreshRSS 1.29.1 arrived as a bug-fix patch with the same urgency. Cashu TS crossed a cryptographic threshold with the first v5.0.0 release candidate intro
Releases: Cashu TS 5.0.0-rc.1, LibreTube 31.3, PhotoPrism May 23, 2026, NewPipe 0.28.7, NewPipe Extractor 0.26.2, Ditto 2.18.0
Releases: nostr-rs-relay release 0.10.0, Phoenix 2.8.0, Mostro 0.17.4, NetNewsWire 7.0.6, llama.cpp b9289, llama.cpp b9294; News: Anthropic Sdk Python 0.104.1
15 releases: 5 Privacy, 7 Bitcoin, 3 AI
21 releases: 8 Privacy, 6 AI, 5 Bitcoin
3 security patches: AdGuard Home 0.108.0-b.86, A new way to fund internet freedom, AdGuard Home 0.107.75; Plus 12 other releases across the desk
12 releases: 6 Privacy, 3 AI, 1 Bitcoin
18 releases: 7 Privacy, 7 AI, 3 Bitcoin, 1 Nostr
The week opened with a coordinated kernel and infrastructure security wave. Tails and umbrelOS patched the DirtyFrag vulnerabilities within 48 hours, while Qubes shipped QSB-114 addressing separate Intel CPU data exposure. Matrix Synapse followed with fixes for worker lock contention DoS under two CVEs. A Core Lightnin
The week opened with a coordinated kernel vulnerability wave. Tails and umbrelOS patched DirtyFrag within 48 hours. Qubes followed with QSB-114 addressing separate Intel CPU data exposure. Matrix Synapse shipped fixes for worker lock contention DoS under two CVEs. Beyond the security cluster, Lightning and privacy tool
1 security patch: Vulnerability Disclosure: Assertion DoS in Core Lightning; Releases: Cashu TS 4.4.0, Amethyst 1.10.0, DAVx5 4.5.12-ose, Venice MCP Server 0.2.0
1 security patch: Bitkey App 2026.9.1; 11 releases: 5 AI, 3 Privacy, 2 Nostr, 1 Bitcoin
Releases: Sparrow Frigate 1.5.0, Ledger Live Desktop 4.4.0, LlamaIndex 0.14.22, Signal Desktop 8.11.0-beta.1, llama.cpp b9156; News: Work with Codex from anywhere
1 security patch: QSB-114: Intel CPU data exposure vulnerability; Releases: Primal Android Primal 3.5.9, Ollama 0.23.4, llama.cpp b9148, Hugging Face Transformers Patch 5.8.1, llama.cpp b9143; News: Introducing Claude for Small Business, Building a safe, effective sandbox to enable Codex on Windows
1 security patch: Matrix Synapse 1.152.1; Releases: Jumble 26.5.6, BitBoxApp 4.51.0, Ditto 2.14.3, Element X iOS 26.05.2, YakiHonne Web 5.9.1, llama.cpp b9122
4 security patches: Tails 7.7.3, umbrelOS 1.7.3, umbrelOS 1.7.2, CVE-2024-52911 - Script Interpreter Remote Crash; Releases: Boltz Client 2.12.0, Bitcoin Knots 29.3, Arti 2.3.0, Ark Network 0.9.5, Cashu TS 4.3.0, Tor Browser 15.0.12
