Every daily brief Freedom.Tech has published. 124 editions so far.
17 releases: 7 AI, 4 Privacy, 3 Bitcoin, 2 Nostr
16 releases: 6 AI, 5 Privacy, 2 Bitcoin, 2 Self-hosting
11 releases: 4 AI, 3 Bitcoin, 3 Privacy, 1 Nostr
10 releases: 3 Privacy, 3 AI, 2 Nostr, 1 Self-hosting
The week carried two severity waves. Four high-priority releases shipped without disclosed CVEs: Ride The Lightning 0.15.11-beta opened a public vulnerability channel and closed a credential-crossing race, Bisq 1.10.6 and Bisq 2 2.1.12 both patched vulnerabilities identified in an external audit, and Aqua Wallet 0.5.2
Releases: Ollama 0.33.0, Ashigaru Desktop 1.3.0, Amethyst 1.14.0, Qwen Code 0.22.0, Ashigaru Desktop 1.4.1, llm CLI 0.33
1 security patch: Bisq 2 2.1.12; 15 releases: 6 Privacy, 6 AI, 2 Bitcoin, 1 Nostr
13 releases: 5 AI, 4 Bitcoin, 3 Privacy, 1 Nostr
1 security patch: Bisq 1.10.5; 21 releases: 7 Privacy, 7 AI, 3 Self-hosting, 3 Bitcoin
2 security patches: Ride The Lightning 0.15.11-beta, Pacing model development in an era of cyber-critical capabilities; 14 releases: 6 Privacy, 6 AI, 1 Bitcoin, 1 Self-hosting
1 security patch: Funding internet freedom together: results from our first participatory funding round; 15 releases: 6 Privacy, 5 AI, 2 Bitcoin, 1 Nostr
1 security patch: Aqua Wallet 0.5.2; 11 releases: 5 AI, 4 Bitcoin, 1 Privacy, 1 Nostr
The week split into two clusters. Privacy-focused mobile clients shipped hardening and UX polish across multiple platforms, Blockstream Green Android 5.6 added manual coin selection and stuck swap recovery, Amber 6.5.1 fixed NIP-46 connection re-encryption during key rotation, and Thunderbird for Android 22.0 added an
Releases: RoboSats 0.8.6-alpha, NewPipe Extractor 0.26.5, KeePassDX 🥷 Prolonged Ninja (Beta04), NewPipe 0.29.1, Delta Chat Desktop 2.59.0, llama.cpp b10448
13 releases: 5 AI, 4 Bitcoin, 2 Nostr, 1 Privacy
21 releases: 10 AI, 4 Privacy, 3 Bitcoin, 2 Nostr
19 releases: 9 Bitcoin, 4 Nostr, 3 AI, 2 Privacy
2 security patches: Blockstream Green Android 5.6.0, Bitkey App 2026.11.2; 19 releases: 10 AI, 4 Bitcoin, 2 Self-hosting, 2 Privacy
1 security patch: Expanding Daybreak as the Cyber Defense Window Narrows; Releases: Thunderbird for Android 22.0, Hugging Face Transformers Release 5.15.0, Thunderbird for Android Thunderbird Beta 23.0b1, vLLM 0.27.0, llama.cpp b10356, Passport Prime 1.3.1; News: Putting frontier cyber models in more trusted hands
Releases: cln-nip47 0.2.0, Specter Desktop 2.2.0-pre1, linkding 1.46.0, Specter Desktop 2.1.11
Three actively exploited vulnerabilities dominated the first half of the week. Tails 7.10.1 patched CVE-2026-64560 in the Linux kernel and expat library, BTCPay Server 2.4.2 shipped a critical fix for an exploit already in the wild, and Bitcoin Knots 29.4 delivered safeguards across the board. Qwen Code 0.21.8 restored
Releases: lnd 0.21.2-beta.rc1, MeshCore Companion Firmware 1.17.0, MeshCore Room Server Firmware 1.17.0, lnd 0.20.3-beta.rc1, llama.cpp b10331, llama.cpp b10329
2 security patches: BTCPay Server 2.4.2, Bitwarden Android Password Manager 2026.7.1; 12 releases: 5 AI, 4 Privacy, 2 Nostr, 1 Self-hosting
1 security patch: Bitcoin Knots 29.4; Releases: BitBoxApp 4.51.4, llama.cpp b10293, Stirling-PDF 2.14.3, Anthropic Sdk Go 1.62.0, Kimi Code 0.34.0
1 security patch: Tails 7.10.1; 19 releases: 9 Privacy, 8 AI, 1 Self-hosting, 1 Bitcoin
19 releases: 8 AI, 7 Privacy, 3 Bitcoin, 1 Self-hosting
1 security patch: The ‘Air-Gap Conundrum’: When Password Managers Meet the Data Center Floor; 14 releases: 5 AI, 4 Bitcoin, 3 Self-hosting, 2 Privacy
Releases: Actual Budget 26.8.0, Jellyfin 12.0, llamafile 0.10.5, Jumble 26.8.1, llama.cpp b10236, llama.cpp b10232
The week opened with a multi-project security push. Bitcoin Optech Newsletter 416 flagged a severe COLDCARD wallet-generation vulnerability, Bisq shipped 1.10.4 to resolve audit-identified issues, and n8n 2.33.3 addressed security-audit risk-reporter imports. Vaultwarden 1.37.1 patched invitation breakage introduced
Releases: koboldcpp 1.118.1, NanoClaw 2.1.54, Fedimint Web Canary Release, Liana Business v1.0rc2, Karakeep 0.33.1, llama.cpp b10219
1 security patch: Bitcoin Optech Newsletter; 10 releases: 5 AI, 3 Bitcoin, 1 Self-hosting, 1 Privacy
1 security patch: AdGuard Home 0.108.0-b.90; 12 releases: 7 AI, 4 Bitcoin, 1 Nostr
11 releases: 3 Nostr, 3 Self-hosting, 3 AI, 1 Privacy
18 releases: 7 Privacy, 5 AI, 2 Nostr, 2 Bitcoin
16 releases: 5 Bitcoin, 5 AI, 4 Privacy, 2 Self-hosting
1 security patch: OpenWrt 24.10.8; Releases: Delta Chat Desktop 2.57.0, Maple 3.3.0, llama.cpp b10144
July's fourth week delivered a coordinated patch wave across password management, messaging, and self-hosting stacks. Bitwarden shipped version 2026.7.0 across all clients, iOS, Android, browser, server, and authenticator, requiring companion server updates and forcing Vaultwarden operators to upgrade to 1.37.0 or risk
Releases: Delta Chat Desktop 2.56.0, Bitwarden iOS Authenticator 2026.7.0, vLLM 0.26.0, LNDg 1.11.0, Nostur 1.30.0, Paperless-ngx 3.0.3
3 security patches: Bitwarden iOS Password Manager 2026.7.0, Vaultwarden 1.37.0, Bitwarden Android Password Manager 2026.7.0; Plus 12 other releases across the desk
2 security patches: Invidious 2..0, Bisq 1.10.4; 15 releases: 6 Bitcoin, 5 AI, 3 Privacy, 1 Self-hosting
16 releases: 5 AI, 5 Privacy, 4 Bitcoin, 2 Self-hosting
2 security patches: Element Android 1.6.62, Bitwarden Server Version 2026.7.0; 22 releases: 9 AI, 5 Privacy, 3 Nostr, 3 Bitcoin
1 security patch: Cake Wallet 6.3.0; 14 releases: 6 Privacy, 3 Bitcoin, 3 AI, 2 Nostr
2 security patches: Ride The Lightning 0.15.9-beta, Vulnerability Disclosure: Twin Memory Exhaustion DoS Vulnerabilities in Core Lightning; Releases: Qwen Code 0.20.0, Kimi Code 0.28.0, Bitcoin Safe 2.1.0, Radicale 3.7.7
Gitea 1.27.0 forced the week's pace. The self-hosted forge shipped breaking changes to reusable Actions workflows, enforced Content-Security-Policy script nonces, and bundled multiple security hardening patches flagged for immediate operator attention. BorgBackup 1.4.5 followed hours later with a low-severity security
1 security patch: BorgBackup 1.4.5; Releases: Trilium 0.104.0, Yattee 2.0.0-beta.264, llama.cpp b10068, llama.cpp b10067
10 releases: 5 AI, 2 Nostr, 2 Privacy, 1 Bitcoin
13 releases: 7 AI, 3 Privacy, 2 Bitcoin, 1 Self-hosting
23 releases: 8 AI, 7 Privacy, 4 Bitcoin, 4 Self-hosting
Releases: XSAs released on 2026-07-14, Ditto 2.31.0, llama.cpp b10015, llama.cpp b10012
2 security patches: Gitea 1.27.0, Bitkey App 2026.11.0; 26 releases: 11 Privacy, 6 AI, 4 Self-hosting, 3 Nostr
Releases: Sprout Buzz Desktop 0.4.1, Syncthing macOS for 2.1.2-1, llama.cpp b9977, Navidrome 0.63.2, n8n beta, N8n 2.30.3
The week delivered a coordinated hardware security push and a scattered maintenance wave. BitBox02 forced a bootloader update to v1.2.2 via firmware 9.26.2, Pi-hole 6.4.3 closed a local privilege-escalation path from the pihole user to root, Bisq 1.10.3 shipped a trade-protocol validation fix flagged during an ongoing
Releases: Divine 1.0.16, Ashigaru Desktop 1.1.0, vLLM 0.25.0, Am I Exposed 0.35.8, Hugging Face Transformers Patch 5.13.1, llama.cpp b9968; News
13 releases: 5 Bitcoin, 4 AI, 2 Nostr, 2 Privacy
1 security patch: OpenAI mandates hardware-backed passkeys for Trusted Access Cyber members to log into ChatGPT accounts; 18 releases: 7 AI, 6 Privacy, 5 Nostr
2 security patches: BitBox02 Firmware 9.26.2, SecureDrop 2.16.1; 16 releases: 6 Privacy, 6 Bitcoin, 4 AI
13 releases: 7 Privacy, 4 AI, 1 Bitcoin
2 security patches: Bisq 1.10.3, Case Study Government of Alberta uses Claude to find and fix cybersecurity vulnerabilities across government systems; 15 releases: 8 Privacy, 5 AI, 1 Bitcoin, 1 Nostr
Releases: restic 0.19.1, langchain-mistralai== 1.1.6, langchain-openrouter== 0.2.6, llama.cpp b9878
The week split cleanly in two. A single Tor Browser vulnerability forced a coordinated patch wave across the freedom-tech stack: Tails 7.9.1 shipped CVE-2026-43503 and CVE-2026-46331 on July 2, and the Tor Project published alpha 16.0a8 the following day. That was the week's only Patch-now signal. Elsewhere, privacy
One update today: llama.cpp b9873
1 security patch: StartOS start-cli 1.0.0; 12 releases: 6 AI, 4 Privacy, 1 Nostr, 1 Bitcoin
11 releases: 3 Bitcoin, 5 Privacy, 1 Nostr
1 security patch: Tails 7.9.1; 12 releases: 5 AI, 3 Nostr, 2 Privacy, 2 Bitcoin
22 releases: 10 Privacy, 6 AI, 5 Bitcoin
15 releases: 7 AI, 4 Privacy, 4 Bitcoin
Releases: uBlock Origin 1.72.0, Core Lightning 26.06.2, Signet 1.20.0, llama.cpp b9833, llama.cpp b9835, Kimi Code 0.20.2
The week carved a clean two-part shape: defensive infrastructure responded to one serious vulnerability, and the AI segment drowned the signal with volume, 51 AI items, most of them incremental. SecureDrop 2.16.0 shipped on June 24 carrying CVE-2026-50000, the only Patch-now advisory in the set. Privacy infrastructure i
Releases: Invidious 2..0, Wasabi Wallet 2.8.0, koboldcpp 1.116, llama.cpp b9825, Nostur 509, llama.cpp b9829
11 releases: 5 AI, 3 Nostr, 2 Privacy, 1 Bitcoin
20 releases: 10 Privacy, 6 AI, 2 Nostr, 1 Bitcoin
1 security patch: SecureDrop 2.16.0; 16 releases: 9 Privacy, 5 AI, 1 Bitcoin
Releases: JoinMarket-NG 0.33.0, ComfyUI 0.26.0, Mostro CLI 0.16.0, llama.cpp b9777, Jan 0.8.3, LocalAI 4.5.0; News: Anthropic Sdk Java 2.43.0, Rslearn 0.1.10, Cloud storage email scams: How to spot them and what to do, Client Ts typescript 2.3.0
12 releases: 8 Privacy, 2 Bitcoin, 2 AI
Releases: nostream 3.0.0, Tuta 352.260618.0, Cashu TS 4.6.0, Ledger Live Mobile 4.9.0, llama.cpp b9752, Delta Chat Desktop 2.53.0; News: Samsung Electronics brings ChatGPT and Codex to employees
The LND zero-timestamp gossip DoS disclosure dominated the defensive signal this week. No other CVEs followed. Privacy infrastructure iterated quietly: Vanadium tracked Chromium to 149.0.7827, Cashu CDK 0.17.1 fixed proof handling for inactive keysets, and Immich released RC2 for v3.0. AI volume reached 49 items, mostl
Releases: haveno 1.8.0, Joplin 3.6.15, Mostrix 0.2.1, Nextcloud iOS Version 33.0.10, DAVx5 4.5.15-ose, llama.cpp b9739; News: Claude Agent Sdk Python 0.2.106
Releases: ESP-Miner 2.14.1, Nostr VPN Release nostr-vpn 4.0.80, KeePassDX 🥷 Flexible Ninja (Beta01), Logseq Desktop app Nightly Release, llama.cpp b9732, llama.cpp b9733; News: Hermes Agent 0.17.0
1 security patch: LND: Zero-Timestamp Gossip DoS disclosure; 10 releases: 5 Privacy, 2 AI, 1 Nostr
12 releases: 3 AI, 6 Privacy, 1 Nostr
17 releases: 6 AI, 5 Nostr, 5 Privacy
15 releases: 6 Privacy, 5 AI, 2 Nostr, 1 Bitcoin
Releases: Blockstream Green iOS 5.5.0, Tuta 351.260612.0, Keystone 3 2.4.6, Notesnook Android 3.4.0-beta.1, llama.cpp b9642; News: Qwen Code desktop 0.0.4, Elevenlabs Python 2.53.0
Privacy volume held steady at 58 items while AI delivered 52 and Lightning produced just 7. No CVEs arrived this week. The clustering tells the story: incremental iteration across privacy tooling, Vanadium tracking Chromium, Cashu CDK migrating databases, Bitwarden removing feature flags, while AI infrastructure continue
Releases: Syncthing-Fork Android 2.1.2, Radicale 3.7.5, llama.cpp b9628, KeePassDX 🪄 Magikey, llama.cpp b9630
12 releases: 7 Privacy, 5 AI
13 releases: 5 Nostr, 4 Privacy, 2 AI, 1 Bitcoin
15 releases: 5 AI, 4 Privacy, 3 Nostr, 2 Bitcoin
28 releases: 13 Privacy, 7 AI, 3 Bitcoin, 2 Nostr
10 releases: 6 Privacy, 2 AI, 1 Bitcoin
Releases: Signet 1.10.0, Payjoin Dev Kit Release payjoin 1.0.0-rc.3, Blockstream Green Android 5.5.0, ownCloud Android 4.8.1, NYM Chat 3.69.459, Ditto 2.21.0; News: Anthropic Sdk Python 0.106.0,, Anthropic Sdk Java 2.36.0, Why business data security is a growth issue, not just a tech problem
Four CVE-flagged releases arrived early in the week, three shipping urgent patches before the rest of the cadence arrived. AdGuard Home 0.108.0-b.88 disclosed CVE-2026-41448, Tails 7.8.1 carried a kernel and Tor client fix under CVE-2026-43503, HiveTalk SFU removed ngrok for CVE-2025-57282, and Ledger Live Desktop 4.6
Releases: ZEUS 13.1.0-beta1, Bitcoin Safe 2.0, Logseq Desktop app Nightly Release, Shockwallet 0.0.28-beta, Notesnook Android 3.3.25, Ditto 2.20.0; News: Anthropic Sdk Go 1.47.0
1 security patch: New Executive Order on AI: Identity as a critical foundation for trusted AI; 10 releases: 3 Privacy, 3 AI, 2 Bitcoin, 2 Nostr
3 security patches: Tails 7.8.1, Ledger Live Desktop 4.6.1, EFF Testifies to Congress on Protecting Americans’ Rights from Government AI; Plus 12 other releases across the desk
1 security patch: Cline 3.87.0; 17 releases: 6 Privacy, 6 AI, 3 Nostr, 1 Bitcoin
1 security patch: AdGuard Home 0.108.0-b.88; 12 releases: 4 AI, 3 Bitcoin, 4 Privacy
2 security patches: HiveTalk SFU 0.0.5, Bitkey App 2026.10.0; 17 releases: 8 Privacy, 4 AI, 3 Bitcoin, 2 Nostr
Releases: Cashu 0.20.1, Bitwarden iOS Password Manager 2026.5.0, Bitwarden iOS Authenticator 2026.5.0, openclaw 2026.6.1-beta.1, llama.cpp b9444
The week was dominated currents: a high-urgency OAuth-binding vulnerability in Miniflux and a step-function model release from Anthropic. Miniflux 2.3.1 arrived flagged Patch now for an account-hijack vector in its OAuth implementation, placing it alongside Bitcoin Optech's disclosure of a remote Core Lightning
Three updates today: Jumble 26.5.7, llama.cpp b9442, llama.cpp b9434
1 security patch: Bitcoin Optech Newsletter; 12 releases: 6 AI, 4 Privacy, 2 Bitcoin
Releases: LibreTube 31.4, Bitwarden Clients Web 2026.5.0, Bitwarden Server Version 2026.5.0, Ledger Live Mobile 4.6.0, langchain-anthropic== 1.4.4, Radicale 3.7.4; News: Hermes Agent 0.15.1, Qwen Code 0.17.0, Introducing Claude Opus 4.8, Discord planned to introduce age verification worldwide – and it's about to go live
11 releases: 4 AI, 6 Privacy, 1 Bitcoin
12 releases: 7 Privacy, 4 AI, 1 Bitcoin
10 releases: 3 AI, 2 Bitcoin, 2 Privacy, 2 Nostr
Releases: LocalAI 4.3.1, haveno 1.6.0, Bisq 2 2.1.11, Mostrix 0.2.0, dnscrypt-proxy 2.1.16, Nostur 497
Three network-adjacent security patches anchored the week. AdGuard Home shipped stable release 0.107.75 and beta 0.108.0-b.86, both flagged for immediate deployment. FreshRSS 1.29.1 arrived as a bug-fix patch with the same urgency. Cashu TS crossed a cryptographic threshold with the first v5.0.0 release candidate intro
Releases: Cashu TS 5.0.0-rc.1, LibreTube 31.3, PhotoPrism May 23, 2026, NewPipe 0.28.7, NewPipe Extractor 0.26.2, Ditto 2.18.0
Releases: nostr-rs-relay release 0.10.0, Phoenix 2.8.0, Mostro 0.17.4, NetNewsWire 7.0.6, llama.cpp b9289, llama.cpp b9294; News: Anthropic Sdk Python 0.104.1
15 releases: 5 Privacy, 7 Bitcoin, 3 AI
21 releases: 8 Privacy, 6 AI, 5 Bitcoin
3 security patches: AdGuard Home 0.108.0-b.86, A new way to fund internet freedom, AdGuard Home 0.107.75; Plus 12 other releases across the desk
12 releases: 6 Privacy, 3 AI, 1 Bitcoin
18 releases: 7 Privacy, 7 AI, 3 Bitcoin, 1 Nostr
The week opened with a coordinated kernel and infrastructure security wave. Tails and umbrelOS patched the DirtyFrag vulnerabilities within 48 hours, while Qubes shipped QSB-114 addressing separate Intel CPU data exposure. Matrix Synapse followed with fixes for worker lock contention DoS under two CVEs. A Core Lightnin
The week opened with a coordinated kernel vulnerability wave. Tails and umbrelOS patched DirtyFrag within 48 hours. Qubes followed with QSB-114 addressing separate Intel CPU data exposure. Matrix Synapse shipped fixes for worker lock contention DoS under two CVEs. Beyond the security cluster, Lightning and privacy tool
1 security patch: Vulnerability Disclosure: Assertion DoS in Core Lightning; Releases: Cashu TS 4.4.0, Amethyst 1.10.0, DAVx5 4.5.12-ose, Venice MCP Server 0.2.0
1 security patch: Bitkey App 2026.9.1; 11 releases: 5 AI, 3 Privacy, 2 Nostr, 1 Bitcoin
Releases: Sparrow Frigate 1.5.0, Ledger Live Desktop 4.4.0, LlamaIndex 0.14.22, Signal Desktop 8.11.0-beta.1, llama.cpp b9156; News: Work with Codex from anywhere
1 security patch: QSB-114: Intel CPU data exposure vulnerability; Releases: Primal Android Primal 3.5.9, Ollama 0.23.4, llama.cpp b9148, Hugging Face Transformers Patch 5.8.1, llama.cpp b9143; News: Introducing Claude for Small Business, Building a safe, effective sandbox to enable Codex on Windows
1 security patch: Matrix Synapse 1.152.1; Releases: Jumble 26.5.6, BitBoxApp 4.51.0, Ditto 2.14.3, Element X iOS 26.05.2, YakiHonne Web 5.9.1, llama.cpp b9122
4 security patches: Tails 7.7.3, umbrelOS 1.7.3, umbrelOS 1.7.2, CVE-2024-52911 - Script Interpreter Remote Crash; Releases: Boltz Client 2.12.0, Bitcoin Knots 29.3, Arti 2.3.0, Ark Network 0.9.5, Cashu TS 4.3.0, Tor Browser 15.0.12
