Back to Freedom.Tech
Archive

Weekly recaps

16 items RSS

The Sunday-evening synthesis read. 16 editions so far.

Daily Brief Aug 23, 2026

Weekly Recap - Aug 16 to Aug 23, 2026

The week carried two severity waves. Four high-priority releases shipped without disclosed CVEs: Ride The Lightning 0.15.11-beta opened a public vulnerability channel and closed a credential-crossing race, Bisq 1.10.6 and Bisq 2 2.1.12 both patched vulnerabilities identified in an external audit, and Aqua Wallet 0.5.2
Daily Brief Aug 16, 2026

Weekly Recap - Aug 9 to Aug 16, 2026

The week split into two clusters. Privacy-focused mobile clients shipped hardening and UX polish across multiple platforms, Blockstream Green Android 5.6 added manual coin selection and stuck swap recovery, Amber 6.5.1 fixed NIP-46 connection re-encryption during key rotation, and Thunderbird for Android 22.0 added an
Daily Brief Aug 9, 2026

Weekly Recap - Aug 2 to Aug 9, 2026

Three actively exploited vulnerabilities dominated the first half of the week. Tails 7.10.1 patched CVE-2026-64560 in the Linux kernel and expat library, BTCPay Server 2.4.2 shipped a critical fix for an exploit already in the wild, and Bitcoin Knots 29.4 delivered safeguards across the board. Qwen Code 0.21.8 restored
Daily Brief Aug 2, 2026

Weekly Recap - Jul 26 to Aug 2, 2026

The week opened with a multi-project security push. Bitcoin Optech Newsletter 416 flagged a severe COLDCARD wallet-generation vulnerability, Bisq shipped 1.10.4 to resolve audit-identified issues, and n8n 2.33.3 addressed security-audit risk-reporter imports. Vaultwarden 1.37.1 patched invitation breakage introduced
Daily Brief Jul 26, 2026

Weekly Recap - Jul 19 to Jul 26, 2026

July's fourth week delivered a coordinated patch wave across password management, messaging, and self-hosting stacks. Bitwarden shipped version 2026.7.0 across all clients, iOS, Android, browser, server, and authenticator, requiring companion server updates and forcing Vaultwarden operators to upgrade to 1.37.0 or risk
Daily Brief Jul 19, 2026

Weekly Recap - Jul 12 to Jul 19, 2026

Gitea 1.27.0 forced the week's pace. The self-hosted forge shipped breaking changes to reusable Actions workflows, enforced Content-Security-Policy script nonces, and bundled multiple security hardening patches flagged for immediate operator attention. BorgBackup 1.4.5 followed hours later with a low-severity security
Daily Brief Jul 12, 2026

Weekly Recap - Jul 5 to Jul 12, 2026

The week delivered a coordinated hardware security push and a scattered maintenance wave. BitBox02 forced a bootloader update to v1.2.2 via firmware 9.26.2, Pi-hole 6.4.3 closed a local privilege-escalation path from the pihole user to root, Bisq 1.10.3 shipped a trade-protocol validation fix flagged during an ongoing
Daily Brief Jul 5, 2026

Weekly Recap - Jun 28 to Jul 5, 2026

The week split cleanly in two. A single Tor Browser vulnerability forced a coordinated patch wave across the freedom-tech stack: Tails 7.9.1 shipped CVE-2026-43503 and CVE-2026-46331 on July 2, and the Tor Project published alpha 16.0a8 the following day. That was the week's only Patch-now signal. Elsewhere, privacy
Daily Brief Jun 28, 2026

Weekly Recap - Jun 21 to Jun 28, 2026

The week carved a clean two-part shape: defensive infrastructure responded to one serious vulnerability, and the AI segment drowned the signal with volume, 51 AI items, most of them incremental. SecureDrop 2.16.0 shipped on June 24 carrying CVE-2026-50000, the only Patch-now advisory in the set. Privacy infrastructure i
Daily Brief Jun 21, 2026

Weekly Recap - Jun 14 to Jun 21, 2026

The LND zero-timestamp gossip DoS disclosure dominated the defensive signal this week. No other CVEs followed. Privacy infrastructure iterated quietly: Vanadium tracked Chromium to 149.0.7827, Cashu CDK 0.17.1 fixed proof handling for inactive keysets, and Immich released RC2 for v3.0. AI volume reached 49 items, mostl
Daily Brief Jun 14, 2026

Weekly Recap - Jun 7 to Jun 14, 2026

Privacy volume held steady at 58 items while AI delivered 52 and Lightning produced just 7. No CVEs arrived this week. The clustering tells the story: incremental iteration across privacy tooling, Vanadium tracking Chromium, Cashu CDK migrating databases, Bitwarden removing feature flags, while AI infrastructure continue
Daily Brief Jun 7, 2026

Weekly Recap - May 31 to Jun 7, 2026

Four CVE-flagged releases arrived early in the week, three shipping urgent patches before the rest of the cadence arrived. AdGuard Home 0.108.0-b.88 disclosed CVE-2026-41448, Tails 7.8.1 carried a kernel and Tor client fix under CVE-2026-43503, HiveTalk SFU removed ngrok for CVE-2025-57282, and Ledger Live Desktop 4.6
Daily Brief May 31, 2026

Weekly Recap - May 24 to May 31, 2026

The week was dominated currents: a high-urgency OAuth-binding vulnerability in Miniflux and a step-function model release from Anthropic. Miniflux 2.3.1 arrived flagged Patch now for an account-hijack vector in its OAuth implementation, placing it alongside Bitcoin Optech's disclosure of a remote Core Lightning
Daily Brief May 24, 2026

Weekly Recap - May 17 to May 24, 2026

Three network-adjacent security patches anchored the week. AdGuard Home shipped stable release 0.107.75 and beta 0.108.0-b.86, both flagged for immediate deployment. FreshRSS 1.29.1 arrived as a bug-fix patch with the same urgency. Cashu TS crossed a cryptographic threshold with the first v5.0.0 release candidate intro
Daily Brief May 18, 2026

Weekly Recap - May 11 to May 18, 2026

The week opened with a coordinated kernel and infrastructure security wave. Tails and umbrelOS patched the DirtyFrag vulnerabilities within 48 hours, while Qubes shipped QSB-114 addressing separate Intel CPU data exposure. Matrix Synapse followed with fixes for worker lock contention DoS under two CVEs. A Core Lightnin
Daily Brief May 17, 2026

Weekly Recap - May 10 to May 17, 2026

The week opened with a coordinated kernel vulnerability wave. Tails and umbrelOS patched DirtyFrag within 48 hours. Qubes followed with QSB-114 addressing separate Intel CPU data exposure. Matrix Synapse shipped fixes for worker lock contention DoS under two CVEs. Beyond the security cluster, Lightning and privacy tool