This release of SecureDrop addresses a recent change in Tor that caused the Monitor Server to issue frequent false-positive OSSEC alerts (issue, pull request).

No administrator action is required; your SecureDrop servers will upgrade to this release automatically.

Acknowledgments

This release was made possible thanks to volunteer code contributions from Anand B.

This release incorporates Freedom of the Press Foundation (FPF) contributions by Martin C, communications manager; Nathan Dyer; Micah Lee; Kunal Mehta, release manager; Cory Francis Myers; Vicki Niu, deputy release manager; Kevin O’Gorman; Francisco Rocha; John Skinner; and Rowen S.

Questions and comments

If you have questions or comments regarding this release, please contact us:

• Via Signal, either in your dedicated SecureDrop support group, or by contacting the support account listed at securedrop.org/help/.
• Via securedrop@freedom.press (PGP encrypted) for sensitive security issues (please use judiciously), or submit a report via Bugcrowd.

We also encourage you to file nonsensitive issues via our GitHub repository.

Thank you for using SecureDrop!