Two security patches amid a heavy AI/privacy volume day

• Bitcoin
• Nostr
• Privacy
• Self-hosting
• AI

§Bitcoin

• Ride The Lightning 0.15.13-beta. Adds request validation before forwarding to LND, Core Lightning, Eclair and Loop.
• Lightning Terminal 0.17.6. Bundles taproot-assets v0.8.5 and lnd v0.21.4-beta, upgrade both components together.
• Aqua Wallet 0.5.4. Added proof of payment links back for successful Lightning transactions; Fixed an issue where failed Lightning transactions showed an L-BTC confirmation count instead of a failed status.
• lnd 0.21.4-beta. No database migrations in this release, straightforward upgrade.
• Trezor Suite 26.9.2. Adds watch-only Stellar RPC and SEP-41 token support on mobile.

§Nostr

• Grain 0.8.0-rc5. Clients that use nostrdb can read these events too.
• Mostro 0.19.1. Register and announce the node’s Serbero; Implement lookup invoice state for the bond CancelLightning impls.
• Nostur 1.32.0. Share profiles with a QR code or copyable Nostr ID, including verified relay information to help others find you; Scan profile QR codes directly from Search using your camera or a saved photo.
• Ditto 2.42.4. Ditto v2.42.4

§Privacy

• New Alpha Release: Tor Browser 16.0a13. Alpha channel only, not for production browsing.
• Arti 2.7.0. New release of the Rust-based next-gen Tor implementation.
• Bitwarden Clients CLI 2026.9.1. Various under-the-hood improvements and minor bug fixes; PM-43249 Model changes to support temporary item sharing.
• Nym Binaries 2026.19-fuqing. The v2026.19-fuqing release of the Nym Binaries.
• Bitwarden Clients Browser 2026.9.3. Adds secure-link sharing for vault items plus generator and case-sensitivity fixes.
• GopenPGP 2.11.1. Test-only fix for Go 1.27 compatibility, no functional changes.
• Tuta 361.260929.0. Introduces a plugin system with a first Nextcloud integration for running Tutamail inside Nextcloud.
• Logseq Desktop app Nightly Release 20261001. This is a nightly release of the Logseq desktop app; It’s unstable compared to the official releases, use it with caution !
• Hardware root of trust in a digital world: Verifying identity across every layer of the enterprise. Faced with a rise of autonomous AI cyber threats, organizations globally are accelerating towards modern phishing-resistant, passwordless authentication.

§Self-hosting

• StartOS StartWRT 1.2.1. Fixes vulnerabilities in the router management interface.
• N8n 2.41.4. Bug-fix release touching execution tracing, DB ping handling, and queue job result storage.

§AI

• openclaw 2026.8.34. Gateway-only extended-stable build, openclaw’s LTS equivalent.
• Hermes Plugin Byterover 1.0.1. Synced with every core fix since the September handoff copy; In-tree tests ported to tests/; CI runs them on Linux, macOS and Windows against hermes-agent main.
• Qwen Code 0.24.7-nightly.20261001.a7deb01bcb. Align Code Mode text with lazy tool discovery; Honor approved cross-directory tool calls.
• AnythingLLM 1.17.0. Read spreadsheet dates as dates, not serial numbers; Drop temp param for Anthropic models.
• Cline CLI 3.0.68. - Agent teams stay fast in long sessions and while teammates are streaming.
• Claude Code Action 1.0.238. Security hardening for GitHub Actions workflows that invoke Claude.
• HelixML 2.1.28. Adds an idle-class CPU tier for desktop agent work alongside build reliability fixes.
• llama.cpp b11335. Fixes CUDA MMVQ routing for Volta (sm70) GPUs, relevant only to that hardware generation.
• Claude Agent Sdk Python 0.2.163. Updates bundled Claude CLI to 2.1.286; pins CI model version to avoid default-model triage failures.
• MiniMax Code 0.6.2. Built from public source commit 564e916.

Read on Freedom.Tech: https://freedom.tech/posts/2026-10-02-bitcoin-daily-brief/
Get the weekly recap in your inbox: https://freedom.tech/subscribe/

Freedom.Tech is powered by Foundation.
Catch the weekly discussion on Freedom Tech Friday via Ungovernable Misfits.