Wed, Jun 10, 2026
Privacy claimed half the wire. Fourteen of 28 releases landed on the privacy beat, but only three matter operationally. OnionShare 2.6.4 patches two security issues: symlink traversal and unauthorized file upload. Signet 1.11.0 fixes a NIP-17 gift-wrap command forgery that let attackers bypass admin-command signature checks. NewPipe 0.28.8 restores YouTube playback after SABR enforcement broke extraction. The rest are routine version bumps, UI tweaks, and dependency updates. AI delivered nine releases, all tooling and model-support additions. Bitcoin, Lightning, and Nostr combined for six items. No protocol work. No CVEs beyond the OnionShare and Signet patches.
Write a comment