dangerzone

Dangerzone is security software, and security software should be independently audited.

So we reached out to OTF's Red Team Lab and asked for help with exactly such an audit. :) The good folks at Include Security conducted the audit itself.

Good news: Dangerzone does, indeed, help keep you safe from malware and trackers in electronic documents.

The audit found no critical, high- or medium-impact vulnerabilities.

Read more about the findings here:
https://freedom.press/news/dangerzone-receives-favorable-audit/

Dangerzone 0.8.0 has been released!

With this release, the second phase of the conversion (pixels to PDF) runs on the host, instead of a container. This change brings performance and stability improvements, at no cost to security.

Other highlights include improved error messages, a fix for SELinux-enforcing systems, and a deprecation of Ubuntu Focal ahead of its EOL date.

Download links and verification instructions for all platforms can be found on our website:
https://dangerzone.rocks

Tails now supports installing Dangerzone!

https://tails.net/news/dangerzone/index.en.html

#Tails is a portable operating system that protects against surveillance and censorship, making it a perfect fit for #Dangerzone. The install process requires some manual work once, but will make it safer for journalists and others to safely handle and process sensitive documents.

Dangerzone 0.7.0 has been released!

We are particularly excited for the integration of the gVisor application kernel, which further strengthens our sandbox for document processing.

Also, as a first taste of the UI/UX improvements to come in the next releases, we have added a new drag-and-drop interface.

Download links and verification instructions for all platforms can be found on our website:

https://dangerzone.rocks

We’re kicking off a new blog series with a deep dive into our recent #gVisor integration, introduced in Dangerzone 0.7.0.

In collaboration with the gVisor team, this post explains how we’ve enhanced Dangerzone’s security with a stronger sandbox.

If you use containers to secure your application, make sure not to miss this one!

https://dangerzone.rocks/news/2024-09-23-gvisor/

#infosec

You can now also keep up with us via our blog, where we'll post release announcements, security advisories, and articles related to safely working with electronic documents:

https://dangerzone.rocks/news/

Dangerzone 0.5.1 has been released! This is mainly a security release that tackles a security vulnerability in the quarantined environment where documents are opened. Vulnerabilities like this are expected and do not compromise the security of Dangerzone, but users are strongly advised to update Dangerzone to the latest version.

See our security advisory for more details: https://github.com/freedomofpress/dangerzone/blob/main/docs/advisories/2023-12-07.md

Download links for all platforms can be found on our website:

https://dangerzone.rocks

Dangerzone 0.7.1 has been released!

This release mainly addresses an issue with new Docker Desktop installations on Windows and Mac OS, and updates the software in our container image. Download links and verification instructions for all platforms can be found on our website:

https://dangerzone.rocks

Dangerzone 0.6.0 has been released! The main highlights of this release are a change in our PDF rendering engine, from Poppler to PyMuPDF, and with it a license change from MIT to AGPLv3. We have added support for Fedora 39, as well as for some extra document formats, including EPUB and SVG. Also, shout out to our community contributors, that's our biggest number in a single release 🎉

Download links for all platforms can be found on our website:

https://dangerzone.rocks

Dangerzone 0.6.1 has been released! This is mainly a bugfix release; it includes a fix for a timeout error that some users have experienced, usability improvements for Linux users, a compatibility fix for macOS versions older than Ventura (13), and support for Fedora 40 and Ubuntu 24.04 (Noble).

Download links and verification instructions for all platforms can be found on our website:

https://dangerzone.rocks

For users testing our new @QubesOS@mastodon.social integration (beta), please note that our instructions were missing a configuration detail for disposable VMs which is necessary to fully harden the configuration.

See our security advisory for more information:

https://github.com/freedomofpress/dangerzone/blob/main/docs/advisories/2023-10-25.md

Fresh installs of Dangerzone on Windows and macOS are affected by a change in Docker Desktop, which causes conversions to fail with an "unknown error", code 125.

If you are impacted by this issue, we've documented a workaround here:
https://github.com/freedomofpress/dangerzone/issues/933

We'll issue a fix soon.

PSA for Dangerzone users on Fedora Linux 39 (or planning to upgrade): Fedora 39, released yesterday unfortunately won't have Dangerzone available for the time being. This is due to this Fedora version missing a critical component which Dangerzone relies on. For technical details, please see https://github.com/freedomofpress/dangerzone/issues/606