The release of the specialized distribution Tails 6.12 (The Amnesic Incognito Live System) has been announced, developed as part of the Tor project. The distribution is based on the Debian 12 package base, comes with GNOME 43 desktop, and is designed for anonymous internet access using Tor's tools. All connections, except traffic through the Tor network, are blocked by default by a packet filter. User data is stored using encryption in a persistent data mode between sessions. An ISO image capable of working in Live mode, sized at 1 GB, is prepared for download.
In the new version, three vulnerabilities identified during an external security audit have been addressed. Two issues affect individual applications and can lead to de-anonymization and tracking of user activity. Another issue allows modification of persistent storage settings. To exploit these vulnerabilities, an attacker must gain access to the local environment, for example, by exploiting an unpatched vulnerability in one of the applications.
Among the non-security-related changes:
- A button has been added to the About application for checking for updates.
- A keyboard shortcut Ctrl+Alt+T has been added for opening the terminal emulator.
- The versions of Tor Browser 14.0.5 and Thunderbird 128.6.0esr have been updated.
- Execution of Python code in isolated mode has been enabled.
- The hang of the login screen during persistent storage activation has been eliminated.
- The reliability of time synchronization during Tor restarts has been improved.
Source: opennet.ru
