Tails 6.12
Important security fixes
The vulnerabilities described below were identified during an external security audit by Radically Open Security and disclosed responsibly to our team. We are not aware of these attacks being used against Tails users until now.
These vulnerabilities can only be exploited by a powerful attacker who has already exploited another vulnerability to take control of an application in Tails.
Prevent an attacker from monitoring Tor circuits. ( #20733 and #20744)
In Tails 6.11 or earlier, an attacker who has already taken control of an application in Tails could then exploit vulnerabilities in Onion Circuits and our Tor Browser wrapper that might lead to deanonymization.
Prevent an attacker from changing the Persistent Storage settings. ( #20745)
Changes and updates
Add a button to check for upgrades from the About Tails utility.
Add the keyboard shortcut Ctrl+Alt+T to open a Terminal.
Update Tor Browser to 14.0.5.
Update Thunderbird to 128.6.0esr.
Fixed problems
Ensure all our Python code keeps running in isolated mode. ( #20719)
Simplify the troubleshooting instructions when an automatic upgrade fails. ( #20466)
Avoid freezing the Welcome Screen while activating the Persistent Storage. ( #20635)
Made time synchronization more reliable when restarting Tor. ( #20530)
Display an error message when upgrading the encryption of the Persistent Storage to LUKS2 fails. ( #20634)
For more details, read our changelog.
Get Tails 6.12
To upgrade your Tails USB stick and keep your Persistent Storage
Automatic upgrades are available from Tails 6.0 or later to 6.12.
If you cannot do an automatic upgrade or if Tails fails to start after an automatic upgrade, please try to do a manual upgrade.
Tails 6.12 has been released and includes various security fixes, such as stopping attackers from monitoring Tor circuits, restricting changes to Persistent Storage settings, and introducing a button to check for upgrades. The update also includes a keyboard shortcut for accessing Terminal, Tor Browser 14.0.5, and Thunderbird 128.6.0esr. Issues include ensuring that Python code works in isolated mode, simplifying troubleshooting instructions, preventing the Welcome Screen from stalling when Persistent Storage is enabled, improving time synchronization reliability, and displaying an error message while upgrading encryption. Automatic upgrades are possible in Tails 6.0 and later.
