summaryrefslogtreecommitdiffstats
path: root/wiki/src/news/version_3.13.2.mdwn
blob: aff7fe3fe16d6b4244921586b476fd90434a80ce (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
[[!meta date="Mon, 6 May 2019 16:00:00 +0000"]]
[[!meta title="Tails 3.13.2 is out"]]
[[!pagetemplate template="news.tmpl"]]
[[!tag announce]]

This release is an emergency release to fix a critical security
vulnerability in *Tor Browser*.

It also fixes [[other security
vulnerabilities|security/Numerous_security_holes_in_3.13.1]]. You should upgrade as soon as possible.

[[!toc levels=1]]

# Changes

<a id="noscript"></a>

## Fixed *NoScript* activation in *Tor Browser*

Starting from Friday May 3, a problem in *Firefox* and *Tor Browser*
disabled all add-ons. This release reactivates all add-ons in *Tor
Browser*, especially *NoScript* which is used to:

- Most importantly, protect against a very strong fingerprinting
  technique called *HTML5 canvas fingerprinting* which can break your
  anonymity.

  Using HTML5 canvas fingerprinting, 2 or more collaborating websites
  can compare how graphics and text are displayed by your computer and
  determine whether 2 website visits are coming from the same computer
  or not.

- Strengthen *Tor Browser* against some JavaScript attacks that can lead
  to compromised accounts and credentials on websites.

- Enable or disable JavaScript on some websites using the *NoScript*
  interface, if you use it.

<div class="caution">

<p>This issue still affects <em>Tor Browser</em> when it is restarted.</p>

</div>

If *NoScript* is activated, the *NoScript* icon appears in the top-left corner
and *Tor Browser* is safe:

[[!img with-noscript.png alt="" link="no"]]

If *NoScript* is deactivated, the *NoScript* icon is absent from the top-left corner and *Tor Browser* is unsafe:

[[!img without-noscript.png alt="" link="no"]]

To reactivate *NoScript* without restarting Tails, do the following:

1. Open the address <span class="command">about:config</span> in *Tor
   Browser*.

   [[!img about-config.png link="no"]]

1. Click the **I accept the risk!** button.

1. At the top of the page, search for
   <span class="command">xpinstall.signatures.required</span>.

1. Double-click on the **xpinstall.signatures.required** line in the
   results to set its value to **false**.

1. Verify that *NoScript* is activated again.

   [[!img xpinstall-false.png link="no"]]

XXX: Copy to security/noscript_disabled_in_tor_browser.mdwn

## Other upgrades and changes

<a id="openpgp-applet"></a>

- Remove the *OpenPGP Applet* and *Pidgin* notification icons from the top
  navigation bar.

  [[!img top-navigation-bar.png link="no"]]

  You can still access the *OpenPGP Applet* and *Pidgin* notification icons
  from the system tray in the bottom-left corner of the screen.

  To display the system tray, move your mouse to the thin gray line in
  the bottom-left of the screen, above the window list:

  [[!img system-tray-folded.png class="right-margin" link="no"]] [[!img system-tray-unfolded.png link="no"]]

  To move these icons back to the top navigation bar, execute the
  following command in a *Terminal*:

  <p class="pre command">gnome-shell-extension-tool --enable-extension=TopIcons@phocean.net</p>

  Until now, these icons were displayed in the top navigation bar by the
  *TopIcons* GNOME extension. This extension is unmaintained, causes GNOME to
  crash ([[!tails_ticket 11188]]), and will not work in Tails 5.0 based on
  Debian 11 (Bullseye).
  
- Install localization packages only for the following languages:

  - Arabic
  - English
  - Farsi
  - French
  - German
  - Hindi
  - Indonesian
  - Italian
  - Portuguese
  - Russian
  - Simplified Chinese
  - Spanish
  - Turkish

  You can install localization packages for other languages using the
  *[[Additional Software|doc/first_steps/additional_software]]* feature.

  Localization packages include:

  - *Thunderbird* localization:
    packages <span class="command">thunderbird-l10n-<span class="command-placeholder">lang</span></span>
  - *LibreOffice* localization:
    packages <span class="command">libreoffice-l10n-<span class="command-placeholder">lang</span></span>
  - Spell-checking dictionaries:
    packages <span class="command">hunspell-<span class="command-placeholder">lang</span></span>

  Where <span class="command-placeholder">lang</span> is the code for
  your language. For example, <span class="command-placeholder">es</span> for
  Spanish.

- Add a suspend button to the system menu.

  [[!img doc/first_steps/introduction_to_gnome_and_the_tails_desktop/system.png link="no"]]

- Add suspend, restart, and shutdown buttons to the system menu when the screen is
  locked.

  [[!img suspend-and-shutdown-while-locked.png link="no"]]

- Replace all non-Latin fonts with the [[!wikipedia Noto_fonts
  desc="Noto fonts family"]].

- Update *Debian* to 9.9.

- Update *Thunderbird* to 60.6.1.

## Fixed problems

- Fix the automatic configuration of new email accounts in *Thunderbird*.
  ([[!tails_ticket 16573]])

- Prevent Tails from shutting down when waking up from suspend on some computers.
  ([[!tails_ticket 11729]])

- Fix the import of the [[Tails signing key|tails-signing.key]] in the
  *Passwords and Keys* utility. ([[!tails_ticket #15213]])

- Don't show notifications about *TailsData* when configuring a persistent
  volume. ([[!tails_ticket 16632]])

  [[!img TailsData-notification.png link="no"]]

For more details, read our [[!tails_gitweb debian/changelog desc="changelog"]].

<a id="known-issues"></a>

# Known issues

### Tails fails to start a second time on some computers ([[!tails_ticket 16389]])

On some computers, after installing Tails to a USB stick,
Tails starts a first time but fails to start a second time. In some
cases, only BIOS (Legacy) was affected and the USB stick was not listed
in the Boot Menu.

We are still investigating the issue, so if it happens to you, please
report your findings by email to <tails-testers@boum.org>. Mention the
model of the computer and the USB stick. This mailing
list is [archived publicly](https://lists.autistici.org/list/tails-testers.html).

To fix this issue:

1. Reinstall your USB stick using the same installation method.

1. Start Tails for the first time and [[set up an administration
   password|doc/first_steps/startup_options/administration_password]].

1. Choose <span class="menuchoice">
   <span class="guimenu">Applications</span>&nbsp;▸
   <span class="guisubmenu">System Tools</span>&nbsp;▸
   <span class="guimenuitem">Root Terminal</span>
   </span> to open a <span class="application">Root Terminal</span>.

1. Execute the following command:

   <p class="pre command">sgdisk --recompute-chs /dev/bilibop</p>

You can also test an experimental image:

1. [Download the *.img* file from our development
   server](https://nightly.tails.boum.org/build_Tails_ISO_bugfix-16389-recompute-chs/lastSuccessful/archive/build-artifacts/).

1. Install it using the same installation methods.

   We don't provide any OpenPGP signature or other verification technique
   for this test image. Please only use it for testing.

See the list of [[long-standing issues|support/known_issues]].

# Get Tails 3.13.2

## To upgrade your Tails USB stick and keep your persistent storage

- Automatic upgrades are available from 3.12, 3.12.1, 3.13, and 3.13.1 to 3.13.2.

- If you cannot do an automatic upgrade or if Tails fails to start after an
  automatic upgrade, please try to do a [[manual upgrade|upgrade]].

## To install Tails on a new USB stick

Follow our installation instructions:

  - [[Install from Windows|install/win]]
  - [[Install from macOS|install/mac]]
  - [[Install from Linux|install/linux]]

<div class="caution"><p>All the data on this USB stick will be lost.</p></div>

## To download only

If you don't need installation or upgrade instructions, you can directly download
Tails 3.13.2:

  - [[For USB sticks (USB image)|install/download]]
  - [[For DVDs and virtual machines (ISO image)|install/download-iso]]

# What's coming up?

Tails 3.14 is [[scheduled|contribute/calendar]] for May 14.

Have a look at our [[!tails_roadmap]] to see where we are heading to.

We need your help and there are many ways to [[contribute to
Tails|contribute]] (<a href="https://tails.boum.org/donate/?r=3.13.2">donating</a> is only one of
them). Come [[talk to us|about/contact#tails-dev]]!