We’re pleased to announce that SecureDrop 2.12.10 has been released. This is a Journalist and Admin Workstation-only release, which adds support for the recent Tails 7 version. This release does not include any changes to the SecureDrop server code.
Please note that SecureDrop 2.12.10 is not compatible with earlier versions of Tails. To perform an upgrade, you must:
- Perform a backup
- Start the upgrade on your existing Tails 6 Admin or Journalist Workstation drive
- Install Tails 7 on an additional new USB drive, which will serve as a drive to clone from
- Perform a manual upgrade from the Tails 7 USB using the Tails Cloner
- Boot into the Journalist or Admin Workstation drive and complete the upgrade to SecureDrop
Given the intricate nature of this upgrade, we strongly suggest that you follow along with our detailed upgrade guide:
https://docs.securedrop.org/en/stable/upgrade/2.12.9_to_2.12.10.html
While there are security improvements in Tails 7, this is not an urgent upgrade. We recommend that administrators perform the upgrade at their convenience, when they have ample time to work through all the necessary steps.
What’s new in SecureDrop 2.12.10?
For administrators
- Migrate admin tooling to Tails 7 (#7648)
For developers
- Update dependencies:
- flate2 from 1.1.0 to 1.1.2 (#7653)
What administrators need to do
Please follow our upgrade guide and get in touch with us if you require assistance.
Acknowledgments
This release incorporates Freedom of the Press Foundation (FPF) contributions by Martin C; Nathan Dyer, communications manager; Kunal Mehta; Erik Moeller; Cory Francis Myers; Vicki Niu; Kevin O’Gorman, release manager; Francisco Rocha; John Skinner; and Rowen S.
Questions and comments
If you have questions or comments regarding this release, please contact us:
- Via our Support Portal, if you are a member (membership is available to SecureDrop administrators on request)
- Via securedrop@freedom.press (PGP encrypted) for sensitive security issues (please use judiciously), or submit a report via Bugcrowd
We also encourage you to file nonsensitive issues via our GitHub repository (issue report form).
Thank you for using SecureDrop!