Today we are announcing the release of SecureDrop 0.5.1. The important changes in this release are summarized below:
SecureDrop servers will now use an apt server run by Freedom of the Press Foundation for future Tor package updates.
The source and journalist interfaces are localized in four additional languages: Arabic, Chinese, Italian and Turkish. Administrators are able to enable languages via securedrop-admin in their Admin Workstation.
Admins can now update their SecureDrop logos via the Admin Interface (the admin page in the Journalist web application) instead of securedrop-admin.
Admins will also be able to send test OSSEC alerts via the Admin Interface.
Admins will no longer receive two OSSEC alerts after the daily reboot. If you’d like to receive emails when your source interface appears to be down in the future, please email securedrop@freedom.press to be added to our Nagios monitoring.
For full details, see the changelog. Development for this release was tracked in the 0.5.1 milestone on GitHub.
What Administrators Need To Do
The update will be automatic on the Application and Monitor Servers. This release does not require you to run securedrop-admin again from the Admin Workstation.
We recommend all administrators to upgrade all journalist and administrator drives to Tails 3.4. Tails 3.4 has mitigations for the Spectre and Meltdown vulnerabilities along with other important security updates.
As always, please submit suggestions and issues you have with the SecureDrop platform to us via the support area of the SecureDrop community forum, the Freedom of the Press Foundation SecureDrop support portal, or by filing a new issue on GitHub. Be aware that GitHub and the community forum are both public channels, and sensitive details of sources or submissions should not be shared over these channels.
Acknowledgements
The translations for all supported languages were updated thanks to the work of many volunteers:
German: Anna Skaja, heartsucker, Ettore Atalan, kwadronaut
Spanish: Anatoli, Camille Fassett, Daniel Arauz, Freddy Martinez, Jose, Pablo Di Noto
French: Alain-Olivier, Loïc Dachary
Norwegian: Allan Nordhøy, Øyvind Bye Skille
Dutch: Anne M, kwadronaut, Yarno Ritzen
Portuguese (Brazil): Bernardo Tonasse, Cecília do Lago, communiaa
And support for new languages was also added thanks to:
Arabic: Ahmad Gharbeia, Ali Boshanab, ButterflyOfFire, Erin McConnell, Gabriele Kahlout, Jasmine Khalil, Jennifer Helsby, kwadronaut, Ramy Raoof, Scharik Yousif, Thalia Rahme
Italian: Beatrice Martini, Claudio Arseni, Manuel D'Orso
Turkish: T. E. Kalaycı, Volkan
Chinese: Chi-Hsun Tsai, H.-L. Lee, Jin Lin Wright, Hong Feng, Shih-Chieh Ilya Li
We are especially grateful to Localization Lab for their help reviewing every translated string to catch typos and errors that could confuse users. Thanks to Erin M. from Localization Lab most of the reviewers discovered SecureDrop and it is their volunteer expertise that allows us to support each language.
If you’re interested in contributing translations to SecureDrop, either for currently supported languages or additional languages, we welcome your contributions.