SecureDrop 2.16.1

SecureDrop 2.16.1 was released on July 8, 2026. It fixes a low-severity security issue that resulted in some instances' Onion Service client authentication credentials being copied to the Monitor Server. Administrators should review the corresponding advisory for more information.

SecureDrop 2.16.0

SecureDrop 2.16.0 was released on June 24, 2026. It includes fixes and performance improvements for the v2 API, a non-critical security fix addressing journalist session corruption as described in CVE-2026-50000, improvements to login throttling logic, and miscellaneous other fixes and dependency updates.

SecureDrop 2.15.1

SecureDrop 2.15.1 was released on April 23, 2026. It improves memory management by the v2 Journalist API and fixes an issue where restoring backups without transferring over the network would previously fail.

SecureDrop 2.15.0

SecureDrop 2.15.0 was released on April 16, 2026. It enables an updated API, which is required for the new Inbox application that will be released soon.

SecureDrop 2.14.0

SecureDrop 2.14.0 was released on February 19, 2026. It includes changes to ensure KeePassXC is available with the admin tools, source guidance updates for the Source Interface, and other miscellaneous updates and bugfixes.

SecureDrop 2.13.0

SecureDrop 2.13.0 was released on December 4, 2025. It includes changes to build and deploy the server administration utility as a Debian package, security improvements for the Source Interface, and other miscellaneous updates and bugfixes.

SecureDrop 2.12.10

SecureDrop 2.12.10 was released on September 24, 2025. It contains updates to Journalist and Admin Workstation tooling to support Tails 7. As there were no server-side code changes, .deb packages were not built for this release.

SecureDrop 2.12.9

SecureDrop 2.12.9 was released on July 10, 2025. It included configuration changes to disable upgrades from Ubuntu 20.04 (Focal) to Ubuntu 24.04 (Noble), along with UI and dependency updates.

SecureDrop 2.12.8

SecureDrop 2.12.8 was released on May 8, 2025. It included configuration changes to trigger the fully automated upgrade for 100% of Application and Monitor Servers from Ubuntu 20.04 (Focal) to Ubuntu 24.04 (Noble).

SecureDrop 2.12.7

SecureDrop 2.12.6 was released on May 7, 2025. It included configuration changes to trigger the fully automated upgrade for 100% of Application Servers and 40% of Monitor Servers from Ubuntu 20.04 (Focal) to Ubuntu 24.04 (Noble).