News

Release Announcement

SecureDrop 2.5.2 Released

We’re pleased to announce that SecureDrop 2.5.2 has been released. This is a hotfix release, updating dependencies used within SecureDrop. Read More

Security Advisory

Security Advisory: Permissions-related vulnerability

SecureDrop 2.5.1 has been released to address a security issue that was found on the SecureDrop server environment during an internal code audit. Read More

Release Announcement

SecureDrop 2.5.1 Released

We’re pleased to announce that SecureDrop 2.5.1 has been released. This is a hotfix release that makes user and permissions-related changes. Read More

Interest Article

Join Us for Aaron Swartz Day 2022

Want to help us improve SecureDrop? Join us November 12-13 at the Aaron Swartz Day and Hackathon, in person in San Francisco, or remotely! The SecureDrop team will be be ready to support new and returning contributors. Read More

Release Announcement

SecureDrop 2.5.0 Released

We’re pleased to announce that SecureDrop 2.5.0 has been released. Changes that journalists and administrators should be aware of are summarized in this blog post. A complete list of changes can be found on GitHub. Read More

Pre-Release Announcement

SecureDrop 2.5.0: Pre-Release Announcement

SecureDrop 2.5.0 is scheduled to be released on Oct 18, 2022. We will send out another notification through this blog, Twitter, Mastodon, and the support portal when the release is live. Changes that journalists and administrators should be aware of are summarized in this blog post. A complete list of changes can be found on GitHub. Read More

Release Announcement

SecureDrop 2.4.2 Released

We’re pleased to announce that SecureDrop 2.4.2 has been released. This is a security release with a kernel update that includes mitigations for the "retbleed" vulnerability. Read More

Release Announcement

SecureDrop 2.4.1 Released

We’re pleased to announce that SecureDrop 2.4.1 has been released. This is a bugfix release. A complete list of changes can be found on GitHub.What’s new in SecureDrop 2.4.1?For administratorsBugfix: SecureDrop 2.3.0 introduced an optional feature to prevent initial submission of a source’s secret seven word codename. The bug caused … Read More