Decent Newsroom
Sign In

Radicale patches an auth bug, AI floods the wire

By Freedom.Tech October 8, 2026 · Edited October 8, 2026
One real security story today: Radicale 3.8.3 fixes an auth flaw where rights and user groups weren't cleared before a conditional set, reported under FO-RAD-2026-001. Everything else is volume. AI leads the beat count with 12 releases, nearly all agent-tooling and SDK point bumps rather than new models. Self-hosting runs close behind with 11, a mix of sync, media, and PaaS updates. Bitcoin and Nostr stay quiet at three releases apiece, no notable hardening or protocol work in either.
Radicale patches an auth bug, AI floods the wire

Bitcoin

  • Core Lightning 26.06.9. Point release with security fixes from responsible disclosures and a gossip regression fix introduced in 26.06.8.
  • KeyOS 1.4.1. Focuses on reliability, battery care, and update speed.
  • Bitcoin Keeper 2.6.3. Fixes a pairing connection issue with Keeper Desktop.

Nostr

  • Grain 0.8.1. Client library patch for apps serving multiple users; relevant if building multi-user Nostr relays on Grain.
  • Ditto 2.44.1. Ditto v2.44.1
  • Sidecar 1.15.9. Fixes uploads to find self-hosted Blossom servers in both composers.

Privacy

  • Logseq Desktop app Nightly Release 20261007. This is a nightly release of the Logseq desktop app; It’s unstable compared to the official releases, use it with caution !
  • Signal Android 8.31.0. A new and improved keyboard for emojis, stickers, and animated GIFs is our GIFt to you; For automatic updates, we recommend using Obtainium.
  • Am I Exposed 0.40.0. Am I Exposed v0.40.0
  • 2026100600. Tags: 2026100600 (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Pixel 8, Pixel 8 Pro, Pixel 8a, Pixel 9, Pixel 9 Pro, Pixel 9 Pro XL, Pixel 9 Pro Fold, Pixel 9a, Pixel 10…
  • Signal Desktop 8.31.0-beta.1. - Handful of bug fixes to keep your app running smoothly; More exciting changes on the horizon!
  • Logseq Desktop APP 2.0.2. Beta improves editing smoothness, startup time, and workflow reliability on the DB version.
  • NetNewsWire 7.2b2 for Mac. Adds Substack-style footnote support and improves CJK text rendering in the article view.

Self-hosting

  • Radicale 3.8.3. Patches an auth flaw where rights and group membership weren’t cleared before a conditional check.
  • Immich 3.3.0. Shared people management; Birthday memories.
  • StartOS start-registry 1.1.1. Keeps all package revisions indexed while filtering client-visible versions, plus dependency security fixes.
  • CryptPad Autumn Release ( 2026.9.0. Full server rewrite for scalability and performance; self-hosters should review before upgrading given the scope of the change.
  • Portainer 2.45.2. Known issues remain with Podman auto-onboarding and socket-based environment setup; check before relying on Podman support.
  • PhotoPrism October 7, 2026. Improves built-in AI image classification and NSFW detection accuracy.
  • ntfy 2.29.0. Fixes cache writes under load; relevant for high-volume self-hosted ntfy instances.
  • Nextcloud iOS Version 35.1.0. Adds PhotoKit background Auto Upload for iOS 27 with Nextcloud 33+.
  • Coolify 4.4.2. Adds settings search to the command palette with global and page-level scopes.
  • StartOS start-cli 2.3.0. Restores multi-architecture image packing and adds registry admin options for start-registry 1.1.1.
  • N8n 2.42.4. 2.42.4 (2026-10-07)

AI

  • Qwen Code 0.25.0-nightly.20261007.8003d28042. Replace selected remote Hosts without losing bindings; Wait 60s before the E2E build artifact download retry.
  • Cline CLI 3.0.70. Fixes 400 errors on commit-message generation with reasoning off for several models, and stops premature exits on MCP server/hook failures.
  • Ollama 0.40.1. Adds proxy cloud usage/balance APIs and fixes a Windows memory-read bug past 2GiB in llama backend.
  • langchain-fireworks== 1.7.1. Changes since langchain-fireworks==1.7.0 release(fireworks): 1.7.1 preserve reasoning in streaming and tool loops chore(deps): bump langgraph-sdk from 0.4.4 to 0.4.6 in /libs/partners/fireworks chore(deps): bump…
  • openclaw 2026.10.1-beta.2. Agent-to-agent authentication: reject unresolved peer-token references and report actionable peer-status warnings instead of continuing with an unusable credential.
  • Qwen 1.3.0. 93 Sync/omni prompts readme badges; 93 Sync/omni prompts readme badges.
  • Cline Desktop 0.0.45. Fixes SSH remote startup failures.
  • llama.cpp b11491. Removes duplicate SYCL block-size defines; minor backend cleanup, no functional change for most users.
  • langchain-huggingface== 1.2.3. Changes since langchain-huggingface==1.2.2 use a supported Scaleway model in streaming test chore(deps): bump langgraph-sdk from 0.4.4 to 0.4.6 in /libs/partners/huggingface chore(deps): bump langgraph-sdk from 0.4.2…
  • Claude Agent Sdk Typescript 0.3.294. Version-matched to Claude Code 2.1.294; update together if pinning both.
  • Claude Code 2.1.294. Fixes prompt/agent hooks written as natural-language instructions not being enforced correctly, including Stop and SubagentStop hooks.
  • MiniMax Code 0.6.3. Built from public source commit 71b18b7.

Read on Freedom.Tech: https://freedom.tech/posts/2026-10-08-bitcoin-daily-brief/
Get the weekly recap in your inbox: https://freedom.tech/subscribe/

Freedom.Tech is powered by Foundation.
Catch the weekly discussion on Freedom Tech Friday via Ungovernable Misfits.

#freedomtech #foundation #ai #bitcoin #privacy #nostr
Write a comment