Release of Tails distribution 4.6 and Tor Browser 9.0.10

Created release of a specialized distribution Tails 4.6 (The Amnesic Incognito Live System), based on the Debian package base, designed for anonymous internet access. Anonymous access in Tails is provided by the Tor system. All connections, except for traffic through the Tor network, are block by the packet filter by default. User data storage in persistent mode is encrypted. A prepared ISO image, which can operate in Live mode, with a size of 1 GB.

The new release of Tails based on libu2f-udev includes support for universal two-factor authentication (U2F) using USB keys. The menu has been updated with recommended applications, including a persistent disk partition configurator, installer, documentation, and a utility for sending problem notifications. The terminal emulator has been removed from the list. graphics stack components, including new releases of Mesa 19.2, X.Org Server 1.20.5, and libdrm 2.44.99 that were tested in Ubuntu 19.10. Fresh versions of video drivers for Intel, AMD, and NVIDIA chips have been added (including the proprietary NVIDIA driver 435); versions of Tor Browser 9.0.10, Thunderbird 68.7.0, Git 1:2.11, Node.js 10.19.0, OpenLDAP 2.4.47, OpenSSL 1.1.1d, ReportLab 3.5.13, WebKitGTK 2.26.4.

Simultaneously has been released the new version of the Tor Browser 9.0.10, focused on ensuring anonymity, security, and privacy. The release is synchronized with the Firefox 68.8.0 ESR codebase, which contains resolved 14 vulnerabilities, of which 10 (CVE-2020-12387, CVE-2020-12388, and 8 under CVE-2020-12395) are marked as critical and potentially capable of leading to the execution of malicious code when opening specially crafted pages. The NoScript add-on has been updated to the release 11.0.25, and the OpenSSL library to version 1.1.1g addressing a vulnerability, affecting TLS 1.3.

Source: opennet.ru