A quieter week, but three patches you actually have to act on

• Patch board
• Release board
  • Privacy
  • Self-hosting
  • AI
  • Nostr
  • Bitcoin
• By the numbers

§Patch board

• Tails 7.10.1 (CVE-2026-64560). This release is an emergency release to fix critical security vulnerabilities in the Linux kernel and the expat XML library.
• Qwen Code 0.21.8. Highlights Restored real-time autofix support for pull requests opened from forks review events to credentialed workflows.
• BTCPay Server 2.4.2. This release contains fix of a critical vulnerability that is being actively exploited.
• The ‘Air-Gap Conundrum’: When Password Managers Meet the Data Center Floor. Late one afternoon, a critical legacy server dropped offline.
• Bitwarden Android Password Manager 2026.7.1. Overview Fixed sync prompt appearing incorrectly during autofill Improved account security Community Highlight PM-40274 force LTR text direction for TOTP code display:shipi…
• Bitcoin Knots 29.4. Bitcoin Knots version 29.4.knots20260508 is now available from: This release includes various bug fixes, performance improvements, and extra safeguards.

§Release board

§Privacy

• uBlock Origin 1.73. - Improve json-edit scriptlet - Revisit scriptlets’ getExtraArgs implementation ––––– Commits to Master Since This Release How to Install the Developer Build: - Firefox: Download the build from uBlock0 1.73.1b0.firefox.signed.xpi uB…
• Vanadium 151.0.7922. Changes in version 151.0.7922.108.0: update to Chromium 151.0.7922.108 A full list of changes from the previous release (version 151.0.7922.83.0) is available through the Git commit log between the releases.
• Yattee 2.0.0-beta.269. New Features Add embedded audio/subtitle track selection for multi-track files Add loading external subtitle files for media-source playback Add view options to playlists list view Add search to playlists list view Show and label WebDAV/…
• Tuta 356.260805.0. What’s new - Improved sync performance - Shared mailboxes are now collapsible - Nested labels and unread mail counters on labels - General performance improvements Bugfixes - Fix LockedError while calling UpdateSessionKeyService - Fix ev…
• Invidious 2.20260804.1. Wrap-up This patch release fixes a regression in the OCI (container) build that omitted debug information, making it harder to diagnose issues in production.
• Bitwarden Server Version 2026.7.2. Removed feature flag for enforcing policies for accepted status members removed feature flag for pricing migrations Various under-the-hood improvements and minor shipit: Feature Development PM-38951 Add CreationDate to org user detail en…
• Tuta 356.260806.1. What’s new - Improved sync performance - Shared mailboxes are now collapsible - Nested labels and unread mail counters on labels - General performance improvements Bugfixes - Fix LockedError while calling UpdateSessionKeyService - Fix ev…
• Arti 2.5.1. Arti is our ongoing project to create a next-generation Tor implementation in Rust.
• Bitwarden iOS Authenticator 2026.7.1. Overview Various under-the-hood bug fixes and improvements shipit: Feature Development PM-40133 Add Send Controls policy support and AnyCodable array/dictionary decoding PM-38443 Add F…
• Nostr VPN 4.1.6. Reliability across every platform Reliability improvements and basic feature fixes across every platform.
• Signal Android 8.22.1. Now you can easily add an Android tablet as a linked device and bring your chats to the big screen.

§Self-hosting

• N8n 2.34.0. 2.34.0 (2026-08-04) Bug Fixes ai-builder: Treat bound stored credentials as settled in setup analysis (5decab2) AWS Bedrock Chat Model Node: Enable TCP keepalive on Bedrock runtime connections (78e27ff) core: Add incremental SSE response…
• authentik 2026.8.0-rc6. See stages/authenticator validate: fix intermittnetly failing throttling test (cherry-pick 24568 to version-2026.8) ci: sentry-r…
• n8n beta. 2.34.0 (2026-08-04) Bug Fixes ai-builder: Treat bound stored credentials as settled in setup analysis (5decab2) AWS Bedrock Chat Model Node: Enable TCP keepalive on Bedrock runtime connections (78e27ff) core: Add incremental SSE response…
• Actual Budget 26.8.1. :link: View release notes Desktop releases Please note: Microsoft store updates can sometimes lag behind the main release couple of days while they verify the new version.
• DAVx5 4.5.19-ose. Bug fixes Backport from main: fix preemptive digest auth - Include correct tasks provider package in PRODID jtx Don’t crash when main component is mis…
• Nextcloud Desktop 34.0.1. Prevent DiscoverySingleLocalDirectoryJob from hanging when target is file Eliminate O(N2) Realm work in large-folder enumeration…

§AI

• llama.cpp b10270. Mtmd: support Qwen3-TTS (note: breaking change to llama-tts binary) convert text model main model load ok convert encoder ok speaker encoder loading ok speaker enc graph adapt vocab for backbone (with some tricks) add suppress tokens poc…
• Ollama 0.32.6. - Qwen3.5 is faster on Apple GPUs: the MLX engine now uses the model’s MTP head for speculative decoding automatically - /v1/chat/completions streaming now matches OpenAI’s wire format: role only on the first chunk, finish reason on its…
• Cline CLI 3.0.51. - Reasoning effort now applies consistently across providers instead of going through per-provider thinking overrides, including Ollama, and asking for reasoning to be off is respected everywhere (from SDK v0.0.71) - meta/muse-spark-1.2-…
• langchain-openai== 1.4.2. Changes since langchain-openai==1.4.1 release(openai): 1.4.2 handle ContextWindowExceededError chore: bump the minor-and-patch group across 3 directories with 7 updates filter langchain-generated content block IDs f…
• Cline 4.1.7. Added - Restore the “View Changes” button on completion rows, backed checkpoints, so you can review everything a task touched from the completion card.

§Nostr

• Lightning.Pub 0.0.33. Breaking API changes (protobuf) - New message TxFeesReq ( sat per v byte or target conf oneof) for chain-fee estimation.
• Sprout Buzz Desktop 0.5.5. Desktop and shared changes - paste composer text without formatting ( 25a9cf1be6d245fbd7373cb1160dbc790baf5bd5 ) - Revert “chore(release): release Buzz Desktop version 0.5.5” ( 79c52166cfe6b6d36bdc7686f943595c74e2f578 ) - chore(release):…
• Amber 6.4.0. Amber 6.4.0 - Redesign the multi-request approval screen with explicit Approve/Deny toggles per request and per group, replacing the select-and-confirm flow, with proper error responses for denied bunker requests - Add support for 113 mo…

§Bitcoin

• Krux Version 26.08.0. This release tightens what the PSBT screens will show and sign, adds a vertical layout option for Stackbit 1248 backups, and replaces the pure-Python UR stack with the new uUR C module, so QR decoding is faster and uses less RAM.
• lnd 0.21.2-beta.rc1. Database Migrations This release introduces no new database migrations, but includes two important fixes to existing migration paths: The KV-to-SQL payment migration now handles historical routes containing an orphaned blinded total amou…
• Payjoin Dev Kit Release payjoin-cli 1.0.0-rc.2. Track payjoin 1.0.0-rc.8, whose check inputs not owned callback now identifies inputs instead of script.
• Payjoin Dev Kit Release 1.0.0-rc.7. This release changes how the receiver’s ownership guard identifies a coin, so check inputs not owned now takes a closure over &OutPoint rather than &Script.
• Blink Mobile 3.0.21. Bug Fixes - Keep the pending deposit amount visible beside the balance - Hand a locked migration with no resumable state to support Features - Transaction history CSV download for non-custodial accounts
• BitBoxApp 4.51.4. - Bundle BitBox02 firmware version v9.26.5 Verifying the release ch with fingerprint DD09 E413 0975 0EBF AE0D EF63 5092 49B0 68D2 15AE: curl | gpg –im…
• Arkade TS SDK 0.4.55. HD swap keys and multi-key restore docs(exit): state the real abort-reason contract; explain the listener slack col…
• Arkade TS SDK Boltz Swap 0.3.60. HD swap keys and multi-key restore docs(exit): state the real abort-reason contract; explain the listener slack col…
• Ride The Lightning 0.15.10-beta. 0.15.10-beta is primarily a secret-hygiene release: it tightens how RTL handles and exposes authentication material, both in its own API responses and in the node log files users routinely share when asking for help.
• Trezor Suite 26.7.4. New features - Added support for Robinhood Chain network - Tron (TRX) staking is now available directly in Trezor Suite - Users can now cancel pending EVM transactions - Option added to view and edit nonce in the EVM send form - A new pr…

§By the numbers

• Stories tracked: 129
• Featured: 41
• Releases: 123
• Active sources: 161
• Security patches: 6
• Days covered: 7

Top beats this week

• AI: 47
• Privacy: 39
• Bitcoin: 21
• Self-hosting: 15
• Nostr: 6
• Unspecified: 1

Read on Freedom.Tech: https://freedom.tech/posts/2026-08-09-weekly-recap/
Get the weekly recap in your inbox: https://freedom.tech/subscribe/

Freedom.Tech is powered by Foundation.
Catch the weekly discussion on Freedom Tech Friday via Ungovernable Misfits.