Tails 6.12 Rolls Out, Sealing Critical Security Gaps

'The Tails project announced the release of its privacy-focused Linux distro, Tails 6.12, featuring vital security patches alongside an array of functional updates. According to the development team, several vulnerabilities were discovered during an external security audit by Radically Open Security. In light of this, perhaps the most noteworthy highlights in Tails 6.12 are the fixes preventing attackers from monitoring Tor circuits and altering Persistent Storage settings. Here are some more details about it. Tor Circuit Monitoring Prevention In earlier versions (up to Tails 6.11), vulnerabilities within Onion Circuits and the Tor Browser wrapper could have allowed a hostile actor—who had already hijacked a running application—to monitor or modify Tor connections, potentially revealing user identities. The Tails developers emphasize that there is no indication these flaws were exploited in the wild. Persistent Storage Security Enhancements Another fix addresses a loophole that, if exploited, could have allowed attackers with existing control of an application to change Persistent Storage settings. This patch ensures that user data in the Persistent Storage remains more securely locked down even in the unlikely event of a breach.' -- source: https://linuxiac.com/tails-6-12-rolls-out-sealing-critical-security-gaps/ Cheers, Peter
participants (1)
-
Peter Reutemann