Pi-hole patches command execution flaw, AI floods the rest

One real security story today: Pi-hole 6.5 closes a high-severity command execution hole tied to crafted PIDs, the kind of bug self-hosters should not sit on. Everything else is volume without weight. Nine of fifteen releases are AI tooling, point bumps across Ollama, Claude Code, llama.cpp, and assorted SDKs, none touching models themselves. Nostr and Privacy each log two minor patch releases. Self-hosting gets one long-overdue Karakeep update alongside the Pi-hole fix. Read the list for the Pi-hole advisory; skim the rest.

Nostr#

Nostream Website 1.2.5. Patch Changes - 858 a0915b8 Thanks @chappie-daemon!
Nostream 3.6.1. Patch Changes - 875 59c5ebf Thanks @Ferryx349!

Privacy#

haveno 1.11.0. Bumps bundled Tor to 0.4.9.14, pulling in high-severity Tor Browser fixes.
KeePassDX 🦋 Beautiful Butterfly. Bundle of autofill and sync fixes, including a duplicate-UUID sync bug and rotated signing key handling.

Self-hosting#

Pi-hole 6.5. Patches a high-severity (CVSS 7.8) command execution bug via crafted PID.
Karakeep 0.34.0. First release after a long gap; worth checking changelog for breaking changes before upgrading.

AI#

Ollama 0.40.7. Openai: allow Responses effort on non-thinking models; Llama-server: let llama-server infer the draft speculative type.
Qwen Code 0.25.2-nightly.20261017.39c237af3b. Admit team plan approval into the journal-only interrupted-turn settle; Add bounded generated failure explorer views (PR4).
openclaw 2026.10.10-beta.1. Moves SQLite and session work off the main thread; improves responsiveness for busy gateways running large agent fleets.
Deepseek Harness 0.2.1-rc.2. Adds support for DeepSeek-V4.1-Flash-1017; only matters if loading that model.
llama.cpp b11718. Reenable ESIMD on the FFN path; Extend ESIMD fusion on FFN path to include Q8 0.
Claude Code 2.1.302. Adds a model override for client-side auto mode classification and a toggle for idle compaction.
Elevenlabs Python 2.73.1. Fix tests on Python 3.13+, add 3.13/3.14 to CI, bump to 2.73.1
Cli 1.6.1. Install elevenlabs-cli 1.6.1 Install prebuilt binaries via shell script curl --proto ' =https ' --tlsv1.2 -LsSf | sh Install prebuilt binaries via powershell script powershell...
Sandbox Runtime 0.0.80. Ask callback now only permits a connection when explicitly returning true; tighten any integrations relying on default-allow behavior.

Read on Freedom.Tech: https://freedom.tech/posts/2026-10-18-bitcoin-daily-brief/ Get the weekly recap in your inbox: https://freedom.tech/subscribe/

Freedom.Tech is powered by Foundation. Catch the weekly discussion on Freedom Tech Friday via Ungovernable Misfits.

Pi-hole patches command execution flaw, AI floods the rest

Nostr#

Privacy#

Self-hosting#

AI#

Comments0