Security Sunday: Gitea and Wasabi patches lead quiet wire
Sunday brought one CVE-grade patch and a handful of incremental releases. Gitea 1.27.3 shipped five security fixes covering token scope, attachment path enforcement, and artifact verification. Wasabi Wallet 2.8.2 landed on the Bitcoin beat with no disclosed CVE but appeared in the security slot. The remaining six stories split evenly across beats: JoinMarket-NG and ngit-cli pushed hardening and privacy work, Anthropic SDK Python surfaced GA files and skills APIs, llama.cpp cut graph dependencies, age delivered minor hardening, and KeePassDX added passkey PRF extension support. No protocol work, no model releases, no major version milestones.
Bitcoin
- Wasabi Wallet 2.8.2. Windows 10 1607+; Windows 11 23H2+.
- JoinMarket-NG 0.38.0. Security hardening and privacy improvements; new 5% zero-fee maker default, quantized feeround, concentrated mixdepth selection for liquidity.
Nostr
- ngit-cli 3.0.0-rc.3. Third release candidate adds NIP-5A static site and OCI container publishing; fixes maintainer handoff and TLS provider selection.
Privacy
- age 1.3.2. Minor release with fixes and hardening improvements.
- KeePassDX 🕵️ Sharp Detective. Adds Passkey PRF extension, new OTP token views, autofill suggestion settings; fixes UV and read-only mode saving.
Self-hosting
- Gitea 1.27.3. Five security fixes: token scope, attachment path enforcement, markup issue access, and artifact verification.
AI
- Anthropic Sdk Python 1.2.0. Files and skills namespaces now use GA shapes; fixes binary file uploads for AWS Bedrock signing.
- llama.cpp b10689. Allows passing alloc dependencies in graph optimize; adds alloc dependency tests.
Read on Freedom.Tech: https://freedom.tech/posts/2026-08-30-bitcoin-daily-brief/
Get the weekly recap in your inbox: https://freedom.tech/subscribe/
Freedom.Tech is powered by Foundation.
Catch the weekly discussion on Freedom Tech Friday via Ungovernable Misfits.
Write a comment