Back to Freedom.Tech Back
Daily Brief Wed, Oct 14, 2026 4 min read

Two security patches anchor a 32-release AI-heavy day

Bitcoin

  • JoinMarket-NG 0.41.0. Security hardening plus a maker coin-selection fix that cuts UTXO bloat; coinjoin makers should update.
  • Bitkey App 2026.16.0. Access the Bitkey release notes to view the features included in this release; Emergency Access !IMPORTANT Download if you've lost access to the Bitkey app for Android or iOS.
  • Wasabi Wallet 2.8.4. Exchange rates and fee rates no longer get stuck; Coinjoin payments now return from "in progress" to the queue and are attempted again once a previous signature is invalidated.
  • Nunchuk Android 2.9.1. Adds XPUB export for software keys, useful for watch-only setups or migrating to other coordinators.

Nostr

  • nostream 3.4.0. 821 36d2a30 Thanks @Ferryx349!
  • Nostur 1.33.0. Allow pasting media in DM and show thumb preview; Clean up abandoned temporary media and inactive WoT snapshots.

Privacy

  • Tor Browser 15.0.25. Routine point release; Tails 7.15 pulls in the same Tor Browser build same day.
  • XSAs released on 2026-10-13. New Xen security advisories affect dom0 isolation; check XSA numbers before deferring an update.
  • Nym Binaries 2026.20-glasgow. The v2026.20-glasgow release of the Nym Binaries.
  • Bitwarden Clients Web 2026.10.0. Fixes vault load failures tied to SSH key items and garbled LastPass import characters; relevant if migrating from LastPass.
  • Bitwarden Server Version 2026.10.0. Adds temporary share links and configurable access token lifetime; self-hosted server admins should review the new settings before rollout.
  • Tails 7.15. Bundles Tor Browser 15.0.25; upgrade for the same fixes as the standalone browser release.
  • Signal Android 8.31.2. A new and improved keyboard for emojis, stickers, and animated GIFs is our GIFt to you; For automatic updates, we recommend using Obtainium.
  • Element Web 1.12.31. Device verification can no longer be skipped by default; expect a changed first-login flow for new devices.
  • Proton Mail Android 7.11.10. Improved the PIN lock screen; Fixed an issue where remote images would fail to load in some messages.
  • Tor is Powered by you: One donation today can impact 4M+ people. Unlike Big Tech, Tor has never and will never sell your data to make money; 6,490 donors, and thousands of volunteer relay operators and others, keep Tor powered for 4M+ at any given moment at zero cost to users.

Self-hosting

  • Syncthing-Fork Android 2.1.7. Other enhancement(custom http cert): Improved custom http certificate and key validation
  • DAVx5 4.5.21-rc.1-ose. Adds Android 17 local network permission handling and a confirmation step before local data removal; relevant for CalDAV/CardDAV sync setups on newer Android.
  • Syncthing 2.1.7-rc.2. Release candidate adds GUI grouping for devices and folders; still pre-release, test before production use.

AI

  • Qwen Code 0.25.1-nightly.20261013.6212189f1f. Nightly build fixing agent-broker robustness; not for production pinning.
  • openclaw 2026.10.3. Large contributor-count release; check changelog before upgrading agent pipelines built on it.
  • Cline 4.1.24. Default model for unconfigured Cline/OpenRouter setups switches to Claude Sonnet 5.5; check cost implications if running without explicit model selection.
  • llama.cpp b11609. WebGPU fix for duplicate expert IDs in mixture-of-experts matmul; relevant only to WebGPU backend users.
  • Hermes Agent 0.22.0. Large version bump billed as a major release; review breaking changes before upgrading production agents.
  • ComfyUI 0.40.0. Server.py Update CSP to allow blob: and data; Add comfy attention and AttentionTensorContainer support to rest of models.
  • koboldcpp 1.123. Introducing koboldcpp.net, our new community website!
  • AnythingLLM 1.18.0. Fixes Kubernetes health probe path and a crash when removing files with attached images; relevant for k8s deployments.
  • Cline Desktop 0.0.46. A new outline along the left edge of the conversation lists each prompt you sent.
  • HelixML 2.12.34. Fixes a cross-tenant repo listing and org-create injection issue; multi-tenant HelixML deployments should patch promptly.
  • Claude Agent Sdk Python 0.2.166. Adds typed hook output classes, replacing untyped dicts; relevant for developers building custom hooks against the SDK.
  • Google DeepMind and Singapore Government collaborate to build fine-tuned AI model for scam detection. On-device Gemma model for scam detection in private chats, built with GovTech Singapore; no cloud data egress claimed.
  • Packages Types 0.25.0. Minor Changes bac5c96: Add the conversation history server event and the persistent session token field on conversation initiation metadata.
  • Packages React 1.18.0. Bac5c96: Forward the experimental onConversationHistory callback to @elevenlabs/client; Updated dependencies bac5c96 @elevenlabs/client@1.28.0.
  • Nvsentinel Provider Mistral v0.1.1. Narrow fix for NVSentinel connectivity under default network policies; only relevant to that integration.

Other

Primary Sources