We’re pleased to announce that SecureDrop 2.12.9 has been released. Following an automatic upgrade period in which all known, actively maintained SecureDrops have been upgraded to Ubuntu Noble, this release disables automatic upgrades from Ubuntu Focal to Noble. If you are using SecureDrop and are still running Ubuntu Focal, you are no longer receiving important Ubuntu security updates. Please contact support for information about backing up and performing a reinstall using Ubuntu Noble.

This release also updates the Tor Browser safety-level guidance in the Source Interface to align with recent changes within Tor Browser.

What’s new in SecureDrop 2.12.9?

For sources and journalists

Web Application

• Update Tor Browser safety-level guidance in Source Interface (#7587, #7592)

For administrators

Ubuntu 24.04 (Noble) support

• Disable automated upgrades from Ubuntu 20.04 (Focal) to Noble (#7595)

For developers

• Ignore safety alerts:
  • 77323 (#7564)
• Update dependencies:
  • setuptools from 70.3.0 to 79.0.0 (#7506)
  • Rust from 1.84.1 to 1.87.0, rustup-init from 1.27.1 to 1.28.2 (#7561)
  • h11 from 0.14.0 to 0.16.0 (#7535)

What administrators need to do

Please follow our upgrade guide and get in touch with us if you require assistance.

Acknowledgments

Thanks to Localization Lab for continued support with our translations. Translations were updated thanks to the work of many volunteers:

• French: AO Localization Lab
• German: Erik Moeller
• Greek: Dimitris Maroulidis
• Hebrew: Yaron Shahrabani, JonnyShuali
• Icelandic: Sveinn í Felli
• Norwegian Bokmål: Øyvind Bye Skille
• Persian: Maryam Azad, Mehrad Mahmoudian
• Polish: Adam Rak
• Romanian: ion ciubara
• Turkish: tekrei

This release incorporates Freedom of the Press Foundation (FPF) contributions by Nathan Dyer, communications manager; Kunal Mehta; Erik Moeller; Cory Francis Myers; Vicki Niu, deputy release manager; Kevin O’Gorman, release manager; Francisco Rocha; and Rowen S.

Questions and comments

If you have questions or comments regarding this release, please contact us:

• Via our Support Portal, if you are a member (membership is available to SecureDrop administrators on request)
• Via securedrop@freedom.press (PGP encrypted) for sensitive security issues (please use judiciously), or submit a report via Bugcrowd

We also encourage you to file nonsensitive issues via our GitHub repository (issue report form).

Thank you for using SecureDrop!