SecureDrop 2.10.0

SecureDrop 2.10.0 was released on September 18, 2024. It addresses one medium-severity and several low-severity security issues found in a routine audit by 7ASecurity.

See https://securedrop.org/news/securedrop-2_10_0-released/ for more information.

SecureDrop 2.9.0

SecureDrop 2.9.0 was released on June 27, 2024. It updates the SecureDrop Release Signing Key expiry date and adds support for Tor's proof-of-work defenses for the Source Interface, to protect against network attacks. New instances will have this feature enabled by default. Existing instances can enable proof-of-work defenses by following our documentation.

See https://securedrop.org/news/securedrop-2_9_0-released/ for more information.

SecureDrop 2.8.0

SecureDrop 2.8.0 was released on March 12 2024. This release added Tails 6 support for Journalist and Admin Workstations, along with other miscellaneous updates and bugfixes.

SecureDrop 2.7.0

SecureDrop 2.7.0 was released on November 7, 2023. It includes a migration from GnuPG to Sequoia for OpenPGP cryptography functionality, updates to support continuous localization via Weblate, and miscellaneous other bugfixes and updates.

SecureDrop 2.6.1

SecureDrop 2.6.1 was released on August 17, 2023. It contains a fix to the logic for provisioning Journalist Workstations on Tails. As there were no server-side code changes, .deb packages were not built for this release.

SecureDrop 2.6.0

SecureDrop 2.6.0 was released on June 22, 2023. It contains a number of security, accessibility, usability and performance improvements, including a new SecureDrop menu in the Admin and Journalist Workstations.

SecureDrop 2.5.2

SecureDrop 2.5.2 was released on February 23, 2023. It updated various software dependencies, including a fix for a denial-of-service vulnerability in the Werkzeug package.

SecureDrop 2.5.1

SecureDrop 2.5.1 was released on December 8, 2022. It included user and permissions-related changes.

SecureDrop 2.5.0

SecureDrop 2.5.0 was released on October 18, 2022. In addition to other fixes and improvements, it included new server-side session handling for the Journalist Interface and API, updates to production dependencies, and miscellaneous improvements in the Source and Journalist interfaces.

SecureDrop 2.4.2

SecureDrop 2.4.2 was released on August 9, 2022. It updated the Linux kernel version used by the SecureDrop servers from 5.15.26 to 5.15.57 to include patches for the recently discovered Retbleed security issue.