Elestio Catalog Updates: 99 New Releases This Week (August 30 - September 5, 2026)

Some weeks the catalog is all feature work. Not this one. Four projects patched every supported branch at once, which usually means something landed in the advisory queue that nobody wanted sitting in the open. Everything that moved between August 30 and September 5, patches first.

Security Alerts

Keycloak 26.7.3 (Aug 31). Two CVEs. CVE-2026-35563: the bundled LDAP client did not verify the server certificate matched the intended hostname, so anyone intercepting the connection could present a valid certificate for a different host. CVE-2026-16093: the required signed-JWT assertion policy could be bypassed with unsigned assertion headers. If you front any identity flow with Keycloak, this is your Monday morning.

Mastodon 4.7.1, 4.6.7, 4.5.17, 4.4.24 (Sep 1). Three advisories backported to every maintained line. The worst is a password authentication bypass in 2FA for LDAP, PAM and SSO accounts. The others: a denial of service from pathological JSON-LD activities, and disabled staff accounts keeping admin API access.

Valkey 9.1.2, 9.0.6, 8.1.10, 8.0.11 (Aug 31 to Sep 1). Marked upgrade urgency SECURITY. GHSA-fq2f-crmw-q97r is an unauthenticated use-after-free of the Lua interpreter state, caused by a process-global script debugger command table caching a pointer to a freed interpreter. Unauthenticated is the word to focus on. GHSA-jcj7-v34w-v9vv is a second use-after-free in RDMA handling, but only hits servers built with USE_RDMA and an RDMA listener configured.

Grafana 13.2.1, 13.1.5, 13.0.8, 12.4.10 (Sep 2). CVE-2026-12704 and CVE-2026-14199, fixed across four branches.

Vault 2.1.0 (Sep 1) patches two Go dependency vulnerabilities, GO-2026-6107 in the etcd client and GO-2026-5052 in go-pkcs12.

Metabase 0.63.16.6, 0.62.19.3, 0.58.32.2 (Sep 4) backported a Metabot SQL editor access hardening fix.

Dify 1.16.1 (Sep 1) shipped security enhancements with its feature releases.

Databases

ClickHouse 26.8.1.2041-lts (Aug 30) opens a new LTS line. An adaptive parallel GROUP BY algorithm picks strategies based on data distribution, GROUP BY fuses with ORDER BY LIMIT using a bounded heap to prune groups early, and GROUP BY on a single String key uses much smaller hash table cells by default. Before you jump: 57 breaking changes between 26.3 and 26.8. Patch builds also landed for 26.8.2.7, 26.7.6.57, 26.6.4.55, and six 26.3 LTS builds through 26.3.31.5.

Also: InfluxDB 3.11.4, 3.10.6, 3.9.13 (Sep 4), Milvus 3.0.1 (Sep 2), and immudb 1.11.2 (Sep 3).

AI and GPU

Ollama 0.34.0 (Sep 5). Ollama models can now be used directly inside ChatGPT Desktop, an odd and interesting direction: your local models, someone else's client. Also improves structured output performance on Apple Silicon and adds OpenAI-compatible client tool search plus response compaction. Version 0.33.3 (Sep 3) added image and audio input for gemma4.

Dify 1.17.0 (Sep 1). The headline is an E2B sandbox backend: agent shell and code execution can run in E2B cloud sandboxes instead of the local one, selected with DIFY_AGENT_RUNTIME_BACKEND. Build-time home snapshots capture an agent's sandbox home directory when a build is published, so published agents restart from the exact filesystem state they were built with. Workspace-level Skill management adds reusable versioned capabilities. Versions 1.16.0 and 1.15.0 shipped the same day, and 1.16.1 is in the security section above.

JupyterHub 6.0.0 (Sep 1). Major version, not a drop-in upgrade. Minimum Python is now 3.10, Tornado 6.5 is required, internal HTTP moved to aiohttp, and there is a schema upgrade. Spawn options passed as GET query parameters now need an opt- prefix. New: PKCE for internal OAuth, a start:servers scope, a SpawnException type, Unix socket support in the proxy, and a stop button on spawn pending pages. Read the upgrade guide, do not skim it. JupyterHub 5.5.2 shipped for anyone staying put.

Also: OpenWebUI 0.11.3 and 0.11.2 (Aug 31), ComfyUI 0.34.5, 0.34.4, 0.34.3 (Sep 2 to 5), Langflow 1.12.0 and 1.11.6 (Sep 1), LobeChat 2.2.16 (Sep 4).

Development

Appwrite 2.0.0 (Sep 4). Second major generation, with the engine underneath replaced. PostgreSQL is now the default, and a project can hold relational, schemaless and vector data on PostgreSQL, MariaDB or MongoDB with the same permissions, queries and realtime API it already had. Console IV is a ground-up rebuild adding Appwrite Terminal (the CLI inside the console, session preconfigured) and Appwrite Explorer (loads your OpenAPI spec and sends live calls from the browser). Existing projects keep working: upgrading from 1.9.x is one command plus a migration, and your data stays put.

NocoDB 2026.08.2 (Sep 3) adds dual-axis charts on interface dashboards, linked records as embedded views, workflow folders, and comment notifications, all in the Community Edition within its usage limits.

Qdrant 1.19.1 (Sep 4) is a performance release: prefetching to saturate memory bandwidth in quantized scoring, a reworked batched 4-bit TurboQuant SIMD implementation, and bounded query plane allocations.

Also shipped: n8n 2.38.3 and 2.37.10 (Sep 3 to 4) plus 1.123.77 on the legacy line, Strapi 5.52.3 (Sep 2), Jenkins 2.580 weekly and 2.568.3 LTS (Sep 2), ToolJet 3.20.222-lts (Sep 3), SonarQube 26.9.0 (Sep 3), Budibase 3.44.0 (Aug 31), Node-RED 5.0.6, 5.0.5 and 4.1.14 (Sep 1), Authentik 2026.8.1 (Sep 1), PocketBase 0.40.2 and 0.22.54 (Sep 2), and Zitadel 4.17.3 and 4.17.2 (Aug 31 to Sep 4).

Hosting and Infrastructure

K3s 1.36.4, 1.35.8, 1.34.11 (Sep 1) patched three lines, with 1.37.0 candidates following through Sep 3. Also: VictoriaMetrics 1.151.0 (Aug 31), SigNoz 0.140.0 (Sep 2), Healthchecks 4.4 (Aug 31).

Applications

OpenProject 17.8.0 (Sep 2). The MCP server can now create and update work packages, add comments, and manage relations, moving it from read-only context provider to something an agent can act through. Also adds multiple target versions per work package, plus sprints and milestones on the project timeline.

Rocket.Chat 8.8.0 (Sep 3). A new workspace setting forces end to end encryption on every new private room and locks the toggle on in the create dialogs. Public rooms are unaffected, federated rooms exempt. Users can also hide presence and status from specific people, who then see them as offline.

Outline 1.10.0 (Sep 2) focused on memory use, then added side by side split view, inline comments for read-only users, and numbered headings.

Also out: Mautic 7.2.0 Lynx Edition (Sep 3) with SVG support in the image selector and a command to process stuck campaign events, Paperless-ngx 3.1.3, 3.1.2, 3.1.1 (Aug 31 to Sep 4), Ghost 6.62.0 (Sep 1), Drupal 11.4.6 and 10.6.16 (Sep 3) with a 12.0.0 alpha now open, Element 1.12.27 (Sep 1), ERPNext 16.34.1, 16.34.0 and 15.121.0 (Sep 2), InvoiceNinja 5.13.37 (Sep 2), Wekan 11.44 through 11.52 (nine point releases, Sep 2 to Sep 5), and a Discourse stable promotion (Sep 4). Nextcloud 35.0.0 and Immich 3.2.0 both reached RC3, and Jellyfin 12.0 reached RC7, so three majors are close.

What Stood Out This Week

The Valkey Lua bug is the one to move on. An unauthenticated use-after-free is a different class of problem from the RDMA issue in the same release. If your instance is reachable from anything you do not fully trust, patch today, not at the next maintenance window.

JupyterHub 6.0 will bite someone. Python 3.10 minimum, an aiohttp migration, a schema upgrade and a changed query parameter convention, all in one release. Good release, and the one most likely to break a Monday if you upgrade blind.

OpenProject's MCP server can now write. Read-only MCP integrations are easy to ship and easy to trust. Letting an agent create work packages and manage relations is the harder, more useful version, and where most project tools get pushed this year.

All of these run as fully managed deployments on Elestio, with updates, backups and monitoring handled for you. Browse the full catalog.

Thanks for reading ❤️ See you next Sunday 👋