Re: [Tails-dev] Tor Browser 15.0.18

Apagar esta mensagem

Responder a esta mensagem
Autor: intrigeri
Data:  
Para: 365 Days, tails-dev
Assunto: Re: [Tails-dev] Tor Browser 15.0.18
Hi,

365 Days (2026-07-24):
> Hello, why is that update missing


On July 14, I've analyzed the security issues fixed in Tor Browser
15.0.18 and determined that they did not warrant an emergency Tails
release, especially given the very limited capacity of our team during
that week.

Here are the relevant bits of my (confidential) notes on the
corresponding issue (tails/tails#21679):

The 2 bugs that triggered the Firefox emergency release are bad but
the only reason they're fixed in a bonus release rather than next
week in the scheduled release is the fact they're part of a public
exploit chain.

That full chain relies on at least 2 prerequisites that are not met
in Tor Browser (backups feature enabled, default download behavior).
And it's Windows-specific (could be adjusted for Linux potentially
but it's not there yet).

> and why are you trapping users in a deadly situation? It's too
> dangerous. Tails OS is no longer safe.🤥


I understand you may be distressed.

However, this sort of hyperbolic allegations is inappropriate here.

If you are aware of facts or data that point the way you're
suggesting, please share them so we can take them into account, and
let's remain civil, thanks.

Cheers,
--
intrigeri