We are currently in the process of having SecureDrop servers automatically upgrade to Ubuntu 24.04 (Noble), using the procedure that we originally described in this blog post.

We will update this blog post throughout the upgrade cycle for up-to-date information.

Current status

• SecureDrop 2.12.4, released on April 30, enables upgrades for 60% of Application Servers.

What administrators need to do

Administrators should review our Noble Upgrade Guide, and reach out to us using the methods below if you receive any OSSEC alerts or encounter any other issues. The SecureDrop team is monitoring the upgrade on instances known to us and will try to reach out if we notice any problems.

Acknowledgments

This release incorporates Freedom of the Press Foundation (FPF) contributions by Nathan Dyer, communications manager; Kunal Mehta, release manager; Erik Moeller; Cory Francis Myers; Kevin O’Gorman, deputy release manager; Francisco Rocha; and Rowen S.

Questions and comments

If you have questions or comments regarding this release, please contact us:

• Via our Support Portal, if you are a member (membership is available to SecureDrop administrators on request)
• Via securedrop@freedom.press (PGP encrypted) for sensitive security issues (please use judiciously), or submit a report via Bugcrowd

We also encourage you to file nonsensitive issues you encounter in our GitHub repository (issue report form).

Thank you for using SecureDrop!