The release of the next version of SecureDrop, 0.4.3, is scheduled for September 12th, 2017. We will send out another notification through our blog on securedrop.org, Twitter, and the support portal when the release goes live.
What’s Coming in SecureDrop 0.4.3
Automatic diceware passphrase generation for new administrator and journalist SecureDrop accounts. Note that any non-diceware passphrases currently in use will continue to work.
Improved monitoring and alerting: more OSSEC false positives will be suppressed.
New SecureDrop accounts must have a minimum username length of 3 characters.
Progress towards internationalizing SecureDrop.
What Administrators Need To Do
The update will be automatic on the app and mon servers.
Make sure you have read our recent security advisory and shared it with all editors and journalists onboarded to SecureDrop.
This release does not require you to run the Ansible playbooks again from the Admin Workstation.
As always, please submit suggestions and issues you have with the SecureDrop platform to us via:
The SecureDrop support portal: https://support.freedom.press/
GitHub: https://github.com/freedomofpress/securedrop/issues/new