Anonymizing Linux: Emergency update Tails 7.4.1 released

The Tails project has released the Linux distribution specialized in anonymous online movement in version 7.4.1. It is an emergency update to close a critical security vulnerability.

In the release announcement from the Tails maintainers, they explain that in the latest version, the OpenSSL library used has been updated to version 3.5.4. This closes the recently disclosed security vulnerabilities in OpenSSL, the most serious of which allows unauthenticated attackers to inject malicious code. “Using these vulnerabilities, malicious Tor relay servers could de-anonymize a Tails user,” the authors explain the potential impact of the security flaw. They also add that they are not aware of any practical exploits of the vulnerabilities so far.

The developers also took the opportunity to update other software packages in the distribution. The Tor client is included in version 0.4.8.22, and the mail client Thunderbird is at version 140.7.0.

Tails 7.4.1: Resolved and Known Issues

They were able to resolve a problem with Gmail authentication in Thunderbird. When opening Wi-Fi settings from the Tor connection assistant, Tails now displays a spinning cursor to indicate that it is working on it.

A known issue is that the Tor Browser homepage incorrectly claims that Tails 7.4 is in use, even after updating to Tails 7.4.1. The links to the release notes also still refer to the older version. When in doubt, interested parties should go to “Apps” – “Tails” – “About Tails”. The dialog correctly displays the currently running version.

As usual, the updated Tails version is available as an image for transferring to a USB stick and as an ISO image for burning to DVD or starting a VM.

Version 7.4 of Tails was released in mid-January. In it, the maintainers updated the software and corrected minor annoyances that could occur meanwhile.

(dmk)