The anonymizing Linux distribution Tails has been released in version 7.8.1. The developers are closing security vulnerabilities that could enable attacks against anonymization.
According to the release announcement for Tails 7.8.1 , this is an emergency update. It closes serious security vulnerabilities in the Linux kernel and weaknesses in the Tor client, explain the maintainers. The Debian Linux kernel now comes in version 6.12.90-2, which corrects vulnerability CVE-2026-43503 (CVSS 8.8 , risk “ high ”). According to the Ubuntu Security Team, the vulnerability is part of “Fragnesia,” with another CVE entry (the “original” was announced in mid-May with CVE-2026-46300 ). Apps in Tails could gain administrator privileges through the vulnerability.
Furthermore, the update closes several security vulnerabilities in the Tor client. Version 0.4.9.9 fixes weaknesses that, for example, allow bypassing checks for so-called “compression bombs” (also known as ZIP bombs) or memory access outside designated memory areas. The release notes provide further details.
Attacks are rather unlikely but could be carried out by “strong attackers” such as state actors or “hacking firms.” If they exploit another, previously unknown security vulnerability in Tails, they can take full control of Tails and deanonymize users. However, such attacks on the vulnerability have not yet become known in practice, the Tails developers add.
Tails 7.8.1 is available for download as a USB image for transferring to USB sticks . There is also an ISO image, for example, for burning to DVD or for use in a VM.
With Tails on a USB stick, you can start, for example, other people's computers with a trusted environment. Interested users can then act anonymously online without leaving unnecessary traces. Tails can also be used to bypass censorship measures, for example.
Tails 7.8 was released just two weeks ago . The most notable change in that version was that the Thunderbird mail client is installed as additional software so that it is always up to date.
This article was originally published in German . It was translated with technical assistance and editorially reviewed before publication.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
