Merge pull request #6509 from freedomofpress/two-four-two-rc1

SecureDrop 2.4.2~rc1

changelog.md

@@ -1,5 +1,8 @@
 # Changelog
 
+## 2.4.2~rc1
+* Security: Update Linux kernel to version 5.15.57, which includes mitigations for the security vulnerability known as “[Retbleed](https://comsec.ethz.ch/research/microarch/retbleed/)”.
+
 ## 2.4.1
 
 ### Web Applications

install_files/ansible-base/group_vars/all/securedrop

@@ -2,7 +2,7 @@
 # Variables that apply to both the app and monitor server go in this file
 # If the monitor or app server need different values define the variable in
 # hosts_vars/app.yml or host_vars/mon.yml
-securedrop_version: "2.4.1"
+securedrop_version: "2.4.2~rc1"
 securedrop_app_code_sdist_name: "securedrop-app-code-{{ securedrop_version | replace('~', '-') }}.tar.gz"
 
 grsecurity: true

install_files/ansible-base/roles/build-securedrop-app-code-deb-pkg/files/changelog-focal

@@ -1,3 +1,9 @@
+securedrop-app-code (2.4.2~rc1+focal) focal; urgency=medium
+
+  * see changelog.md
+
+ -- SecureDrop Team <[email protected]>  Wed, 03 Aug 2022 14:26:30 -0400
+
 securedrop-app-code (2.4.1+focal) focal; urgency=medium
 
   * see changelog.md

molecule/builder-focal/tests/vars.yml

@@ -1,5 +1,5 @@
 ---
-securedrop_version: "2.4.1"
+securedrop_version: "2.4.2~rc1"
 ossec_version: "3.6.0"
 keyring_version: "0.1.6"
 config_version: "0.1.4"

securedrop/version.py

@@ -1 +1 @@
-__version__ = '2.4.1'
+__version__ = '2.4.2~rc1'

setup.py

@@ -4,7 +4,7 @@
 
 setuptools.setup(
     name="securedrop-app-code",
-    version="2.4.1",
+    version="2.4.2~rc1",
     author="Freedom of the Press Foundation",
     author_email="[email protected]",
     description="SecureDrop Server",