We’re pleased to announce that SecureDrop 2.5.2 has been released. This is a hotfix release, updating dependencies used within SecureDrop. The complete list of changes can be found on GitHub.
What’s new in SecureDrop 2.5.2?
For administrators
- Security: This release updates dependencies used internally by SecureDrop (Pull Requests: 1, 2, 3, 4, 5, 6)
What administrators need to do
SecureDrop Application and Monitor Servers will be updated to SecureDrop 2.5.2 automatically within 24 hours of the release. As with previous releases, we recommend that you update your Tails workstations to the latest version of Tails and the latest version of SecureDrop. Please see our upgrade guide for instructions.
Acknowledgements
This release incorporates Freedom of the Press Foundation contributions by: Kevin O'Gorman (release manager), Cory Myers (deputy release manager), Nathan Dyer (communications manager), Kunal Mehta, Rowen S, and Michael Z, as well as volunteer code contributions from Rohit.
Questions and comments
If you have questions or comments regarding this release, please contact us:
- Via our Support Portal, if you are a member (membership is available to SecureDrop administrators on request);
- Via securedrop@freedom.press (GPG encrypted) for sensitive security issues (please use judiciously);
- Via our community forums.
We also encourage you to file non-sensitive issues you encounter in our GitHub repository (issue report form).
Thank you for using SecureDrop!