On February 6, 2025, the Tails development team announced the release of a new version of their privacy-focused distribution, Tails 6.12. This version addresses critical security vulnerabilities and includes new functional updates.
It is worth noting that the distribution is based on Debian GNU/Linux, designed to be installed on a USB stick, includes tools for ensuring digital security, and is aimed at protection against surveillance and censorship, ensuring privacy and anonymity.
Key Security Fixes
During a security audit conducted by Radically Open Security, several vulnerabilities were identified. The most significant ones include:
- Prevention of Monitoring Tor Connections: In previous versions (prior to Tails 6.11), vulnerabilities in Onion Circuits and the Tor Browser wrapper could allow an attacker, who had already gained control over the application, to monitor or alter Tor connections, which could lead to user de-anonymization. Tails developers emphasize that there is no evidence that these vulnerabilities were exploited in real attacks.
- Improved Security of Persistent Storage: Another vulnerability allowed attackers, already controlling the application, to modify persistent storage settings. This patch provides more robust protection for user data even in the event of a breach.
Other changes
In addition to addressing vulnerabilities, Tails 6.12 includes other fixes and updates to enhance user experience and system performance:
- Error Message for Encrypting Persistent Storage: When an attempt to update encryption to LUKS2 fails, users receive a notification that minimizes confusion.
- Isolated Mode for Python Code: Tails continues to execute its Python code in isolated mode, reducing the risks of running malicious scripts.
- Simplified Troubleshooting Instructions: Developers have simplified the instructions for situations when automatic updates fail, making them less intimidating and more understandable.
- Fix for Welcome Screen Freeze: Activating persistent storage no longer causes the welcome screen to freeze.
- Improved Time Synchronization: The Tor restart now provides more reliable time synchronization, reducing connection issues.
- New update check button: A button to check for new updates has been added to the 'About Tails' utility.
- Quick access to the terminal: Users can now open a terminal window by pressing 'Ctrl+Alt+T'.
- Application updates: Tails includes updated versions of Tor Browser 14.0.5 and Thunderbird 128.6, which contain the latest security and performance improvements.
Installation and updates
Users already running Tails 6.0 or later can automatically upgrade to version 6.12. If the automatic upgrade fails, it is recommended to perform a manual update.
For new users or those wanting to perform a clean installation without preserving persistent storage, installation instructions for Linux are available , as well as forFebruary 6, 2025, team. Windows and macOS.
Source: linux.org.ru
