Two security patches, umbrelOS and Vaultwarden

Two disclosures anchor an otherwise routine Monday. umbrelOS 2.0.1 patches a kernel-level networking CVE and Vaultwarden 1.37.5 ships its own advisory fixes, both demanding prompt upgrades for self-hosters. The remaining nineteen releases are point updates and incremental features across AI, Nostr, Bitcoin and self-hosting tooling, with no new protocol changes or model launches. AI leads the volume with seven releases, all maintenance or compatibility work rather than new weights. Nostr clients post five updates, mostly UI and privacy tweaks.

Freedom.Tech

2. November 2026November 2, 2026 · 2 Min. Lesezeit2 min read

Bitcoin#

Bitcoin Safe 2.2.1. Adds Keycard Shell hardware wallet support.
Nunchuk Android 2.9.4. - Bug fixes and improvements

Nostr#

Vector 0.5.0-3. Flagship Vigil release; check changelog before updating production clients.
YakiHonne Mobile 2.1.1. Adds a unified All-activity filter for notes, replies, mentions, and pins.
Nostream 3.10.2. Patch Changes - 986 3696f3e Thanks @Ferryx349!
Sidecar 1.16.5. Strips EXIF metadata from photos before upload, closing a privacy leak for image posts.
Amethyst 1.21.0. Mostly translation and packaging sync; no functional changes.

Privacy#

Obtainium 1.7.4. Fixes URL parsing for self-hosted app sources; relevant if pointing at custom repos.

Self-hosting#

umbrelOS 2.0.1. Patches CVE-2026-98432, a kernel network-handling flaw.
Vaultwarden 1.37.5. Addresses disclosed security advisories; apply before next sync to avoid exposure.
Miniflux 2.3.5. Adds OpenID Connect admin-role mapping; lets SSO group membership control admin access.
Actual Budget 26.11.0. :link: View release notes Desktop releases Please note: Microsoft store updates can sometimes lag behind the main release by a couple of days while they verify the new version.
Gitea 28.3.0. Adds webhook release-asset mentions and actions caching; minor UI and performance polish.

AI#

Maple 3.4.6. Long chats now show Responses compaction progress and dividers that mark compacted history; The Agent tab opens Maple Work.
Open Interpreter 0.0.58. Validates compatibility with Codex 0.159.0 for model discovery.
InvokeAI 6.14.3. Adds a vector graphics layer to Canvas and fixes a Model Manager download bug.
HelixML 2.12.47. Fixes bot startup recovery and interaction ordering after config changes.
koboldcpp 1.124.1. NEW!
llama.cpp b12032. Build-system fix for SyCL LevelZero includes; relevant mainly to packagers.
Kimi Code 2.5.0-canary.20261102033430-40590f6. Canary build adds cross-workspace skill merging and ACP request queuing fixes.

Read on Freedom.Tech: https://freedom.tech/posts/2026-11-02-bitcoin-daily-brief/ Get the weekly recap in your inbox: https://freedom.tech/subscribe/

Freedom.Tech is powered by Foundation. Catch the weekly discussion on Freedom Tech Friday via Ungovernable Misfits.

#ai#bitcoin#foundation#freedomtech#nostr#privacy

Written by

Freedom.Tech

A daily intelligence desk for practical freedom technology. Bitcoin, Lightning, Nostr, privacy, AI, self-hosting, open hardware, and security updates. Powered by foundation.xyz

Comments

No comments yet. Start the conversation.