What’s new in SecureDrop Workstation 1.1.2?

This version removes the sd-retain-logvm and its contents, which was created as part of the SecureDrop Workstation 1.0.2 release for forensic analysis purposes. This VM maintained a copy of the original sd-log VM before it was recreated as part of the mitigation for CVE-2025-24889.

A full list of changes can be found below:

Administrator-facing features

• Remove sd-retain-logvm (#1285)

Users will receive this update the next time they run the updater.

Acknowledgments

This release incorporates Freedom of the Press Foundation (FPF) contributions by Giulio B, Nathan Dyer, Kunal Mehta, Erik Moeller, Cory Francis Myers, Kevin O'Gorman, Francisco Rocha, and Rowen S.