This release fixes [many security issues](
https://tails.boum.org/security/Numerous_security_holes_in_2.3/index.en.html) and users should upgrade as soon as possible.
# Changes
## New features
* We enabled the automatic account configuration of _Icedove_ which discovers the correct parameters to connect to your email provider based on your email address. We improved it to rely only on secure protocol and we are working on sharing these improvements with Mozilla so that users of _Thunderbird_ outside Tails can benefit from them as well.
[?](
https://tails.boum.org/ikiwiki.cgi?do=create&from=news%2Fversion_2.4&page=autoconfig.png)autoconfig.png
## Upgrades and changes
* Update _Tor Browser_ to [6.0.1](
https://blog.torproject.org/blog/tor-browser-601-released), based on Firefox 45.
* Remove the preconfigured `#tails` IRC channel. [Join us on XMPP instead!](
https://tails.boum.org/support/chat/index.en.html)
* Always display minimize and maximize buttons in titlebars. ([#11270](
https://labs.riseup.net/code/issues/11270))
* Remove _GNOME Tweak Tool_ and _hledger_. You can add them back using the [_Additional software packages_](
https://tails.boum.org/doc/first_steps/persistence/configure/index.en.html#additional_software) persistence feature.
* Use secure HKPS OpenPGP key server in _Enigmail_.
* Harden our firewall by rejecting `RELATED` packets and restricting Tor to only send `NEW` TCP `syn` packets. ([#11391](
https://labs.riseup.net/code/issues/11391))
* Harden our kernel by:
* Setting various security-related kernel options: `slab_nomerge slub_debug=FZ mce=0 vsyscall=none`. ([#11143](https://labs.riseup.net/code/issues/11143))
* Removing the .map files of the kernel. ([#10951](https://labs.riseup.net/code/issues/10951))
## Fixed problems
* Update the _DRM_ and _Mesa_ graphical libraries. This should fix recent problems with starting Tails on some hardware. ([#11303](
https://labs.riseup.net/code/issues/11303))
* Some printers that stopped working in Tails 2.0 should work again. ([#10965](
https://labs.riseup.net/code/issues/10965))
* Enable Packetization Layer Path MTU Discovery for IPv4. This should make the connections to `obfs4` Tor bridges more reliable. ([#9268](
https://labs.riseup.net/code/issues/9268))
* Remove our custom ciphers and MACs settings for SSH. This should fix connectivity issues with other distributions such as OpenBSD. ([##7315](
https://labs.riseup.net/code/issues/%237315))
* Fix the translations of _Tails Upgrader_. ([#10221](
https://labs.riseup.net/code/issues/10221))
* Fix displaying the details of a circuit in _Onion Circuits_ when using Tor bridges. ([#11195](
https://labs.riseup.net/code/issues/11195))
For more details, read our [changelog](
https://git-tails.immerda.ch/tails/plain/debian/changelog).
# Known issues
* The automatic account configuration of _Icedove_ freezes when connecting to some email providers. ([#11486](
https://labs.riseup.net/code/issues/11486))
* In some cases sending an email with Icedove results in the error: "The message could not be sent using Outgoing server (SMTP) mail.riseup.net for an unknown reason." When this happens, simply click "Ok" and try again and it should work. ([#10933](
https://labs.riseup.net/code/issues/10933))
* The update of the _Mesa_ graphical library introduce new problems at least on AMD HD 7770 and nVidia GT 930M.
See the list of [long-standing issues](
https://tails.boum.org/support/known_issues/index.en.html).
# Get Tails 2.4
* To install, follow our [installation instructions](
https://tails.boum.org/install/index.en.html).
* To upgrade, an automatic upgrade is available from 2.3 to 2.4.
If you cannot do an automatic upgrade or if you fail to start after an automatic upgrade, please try to do a [manual upgrade](
https://tails.boum.org/upgrade/index.en.html).
* [Download Tails 2.4.](
https://tails.boum.org/install/download/index.en.html)
# What's coming up?
Tails 2.5 is [scheduled](
https://tails.boum.org/contribute/calendar/) for August 2.
Have a look at our [roadmap](
https://labs.riseup.net/code/projects/tails/roadmap) to see where we are heading to.
We need your help and there are many ways to [contribute to Tails](
https://tails.boum.org/contribute/index.en.html) ([donating](
https://tails.boum.org/contribute/how/donate/index.en.html) is only one of them). Come [talk to us](
https://tails.boum.org/about/contact/#tails-dev)!
URL:
https://tails.boum.org/news/version_2.4/index.en.html
%20and%20users%20should%20upgrade%20as%20soon%20as%20possible.%0A>%20%0A>%20#%20Changes%0A>%20%0A>%20##%20New%20features%0A>%20%0A>%20%20%20*%20We%20enabled%20the%20automatic%20account%20configuration%20of%20_Icedove_%20which%20discovers%20the%20correct%20parameters%20to%20connect%20to%20your%20email%20provider%20based%20on%20your%20email%20address.%20We%20improved%20it%20to%20rely%20only%20on%20secure%20protocol%20and%20we%20are%20working%20on%20sharing%20these%20improvements%20with%20Mozilla%20so%20that%20users%20of%20_Thunderbird_%20outside%20Tails%20can%20benefit%20from%20them%20as%20well.%0A>%20%0A>%20%5B?%5D(https://tails.boum.org/ikiwiki.cgi?do=create&from=news%2Fversion_2.4&page=autoconfig.png)autoconfig.png%0A>%20%0A>%20##%20Upgrades%20and%20changes%0A>%20%0A>%20%20%20*%20Update%20_Tor%20Browser_%20to%20%5B6.0.1%5D(https://blog.torproject.org/blog/tor-browser-601-released),%20based%20on%20Firefox%2045.%0A>%20%0A>%20%20%20*%20Remove%20the%20preconfigured%20%60#tails%60%20IRC%20channel.%20%5BJoin%20us%20on%20XMPP%20instead!%5D(https://tails.boum.org/support/chat/index.en.html)%0A>%20%0A>%20%20%20*%20Always%20display%20minimize%20and%20maximize%20buttons%20in%20titlebars.%20(%5B#11270%5D(https://labs.riseup.net/code/issues/11270))%0A>%20%0A>%20%20%20*%20Remove%20_GNOME%20Tweak%20Tool_%20and%20_hledger_.%20You%20can%20add%20them%20back%20using%20the%20%5B_Additional%20software%20packages_%5D(https://tails.boum.org/doc/first_steps/persistence/configure/index.en.html#additional_software)%20persistence%20feature.%0A>%20%0A>%20%20%20*%20Use%20secure%20HKPS%20OpenPGP%20key%20server%20in%20_Enigmail_.%0A>%20%0A>%20%20%20*%20Harden%20our%20firewall%20by%20rejecting%20%60RELATED%60%20packets%20and%20restricting%20Tor%20to%20only%20send%20%60NEW%60%20TCP%20%60syn%60%20packets.%20(%5B#11391%5D(https://labs.riseup.net/code/issues/11391))%0A>%20%0A>%20%20%20*%20Harden%20our%20kernel%20by:%0A>%20%0A>%20%0A>%20##%20Fixed%20problems%0A>%20%0A>%20%20%20*%20Update%20the%20_DRM_%20and%20_Mesa_%20graphical%20libraries.%20This%20should%20fix%20recent%20problems%20with%20starting%20Tails%20on%20some%20hardware.%20(%5B#11303%5D(https://labs.riseup.net/code/issues/11303))%0A>%20%0A>%20%20%20*%20Some%20printers%20that%20stopped%20working%20in%20Tails%202.0%20should%20work%20again.%20(%5B#10965%5D(https://labs.riseup.net/code/issues/10965))%0A>%20%0A>%20%20%20*%20Enable%20Packetization%20Layer%20Path%20MTU%20Discovery%20for%20IPv4.%20This%20should%20make%20the%20connections%20to%20%60obfs4%60%20Tor%20bridges%20more%20reliable.%20(%5B#9268%5D(https://labs.riseup.net/code/issues/9268))%0A>%20%0A>%20%20%20*%20Remove%20our%20custom%20ciphers%20and%20MACs%20settings%20for%20SSH.%20This%20should%20fix%20connectivity%20issues%20with%20other%20distributions%20such%20as%20OpenBSD.%20(%5B##7315%5D(https://labs.riseup.net/code/issues/%237315))%0A>%20%0A>%20%20%20*%20Fix%20the%20translations%20of%20_Tails%20Upgrader_.%20(%5B#10221%5D(https://labs.riseup.net/code/issues/10221))%0A>%20%0A>%20%20%20*%20Fix%20displaying%20the%20details%20of%20a%20circuit%20in%20_Onion%20Circuits_%20when%20using%20Tor%20bridges.%20(%5B#11195%5D(https://labs.riseup.net/code/issues/11195))%0A>%20%0A>%20For%20more%20details,%20read%20our%20%5Bchangelog%5D(https://git-tails.immerda.ch/tails/plain/debian/changelog).%0A>%20%0A>%20#%20Known%20issues%0A>%20%0A>%20%20%20*%20The%20automatic%20account%20configuration%20of%20_Icedove_%20freezes%20when%20connecting%20to%20some%20email%20providers.%20(%5B#11486%5D(https://labs.riseup.net/code/issues/11486))%0A>%20%0A>%20%20%20*%20In%20some%20cases%20sending%20an%20email%20with%20Icedove%20results%20in%20the%20error:%20%22The%20message%20could%20not%20be%20sent%20using%20Outgoing%20server%20(SMTP)%20mail.riseup.net%20for%20an%20unknown%20reason.%22%20When%20this%20happens,%20simply%20click%20%22Ok%22%20and%20try%20again%20and%20it%20should%20work.%20(%5B#10933%5D(https://labs.riseup.net/code/issues/10933))%0A>%20%0A>%20%20%20*%20The%20update%20of%20the%20_Mesa_%20graphical%20library%20introduce%20new%20problems%20at%20least%20on%20AMD%20HD%207770%20and%20nVidia%20GT%20930M.%0A>%20%0A>%20See%20the%20list%20of%20%5Blong-standing%20issues%5D(https://tails.boum.org/support/known_issues/index.en.html).%0A>%20%0A>%20#%20Get%20Tails%202.4%0A>%20%0A>%20%20%20*%20To%20install,%20follow%20our%20%5Binstallation%20instructions%5D(https://tails.boum.org/install/index.en.html).%0A>%20%0A>%20%20%20*%20To%20upgrade,%20an%20automatic%20upgrade%20is%20available%20from%202.3%20to%202.4.%0A>%20%0A>%20If%20you%20cannot%20do%20an%20automatic%20upgrade%20or%20if%20you%20fail%20to%20start%20after%20an%20automatic%20upgrade,%20please%20try%20to%20do%20a%20%5Bmanual%20upgrade%5D(https://tails.boum.org/upgrade/index.en.html).%0A>%20%0A>%20%20%20*%20%5BDownload%20Tails%202.4.%5D(https://tails.boum.org/install/download/index.en.html)%0A>%20%0A>%20#%20What's%20coming%20up?%0A>%20%0A>%20Tails%202.5%20is%20%5Bscheduled%5D(https://tails.boum.org/contribute/calendar/)%20for%20August%202.%0A>%20%0A>%20Have%20a%20look%20at%20our%20%5Broadmap%5D(https://labs.riseup.net/code/projects/tails/roadmap)%20to%20see%20where%20we%20are%20heading%20to.%0A>%20%0A>%20We%20need%20your%20help%20and%20there%20are%20many%20ways%20to%20%5Bcontribute%20to%20Tails%5D(https://tails.boum.org/contribute/index.en.html)%20(%5Bdonating%5D(https://tails.boum.org/contribute/how/donate/index.en.html)%20is%20only%20one%20of%20them).%20Come%20%5Btalk%20to%20us%5D(https://tails.boum.org/about/contact/#tails-dev)!%0A>%20%0A>%20URL:%20https://tails.boum.org/news/version_2.4/index.en.html%0A>%20%0A>%20 "Reply to this message")
autoconfig.png){kind=link}
