[Tails-testers] [Tails-news] Tails 3.13.2 is out

This release is an emergency release to fix a critical security vulnerability
in _Tor Browser_.

It also fixes [other security
vulnerabilities](https://tails.boum.org/security/Numerous_security_holes_in_3.13.1/).
You should upgrade as soon as possible.

# Changes

## Fixed _NoScript_ activation in _Tor Browser_

Starting from Friday May 3, a problem in _Firefox_ and _Tor Browser_ disabled
all add-ons. This release reactivates all add-ons in _Tor Browser_, especially
_NoScript_ which is used to:

* Most importantly, protect against a very strong fingerprinting technique called _HTML5 canvas fingerprinting_ which can break your anonymity.

Using HTML5 canvas fingerprinting, 2 or more collaborating websites can
compare how graphics and text are displayed by your computer and determine
whether 2 website visits are coming from the same computer or not.

* Strengthen _Tor Browser_ against some JavaScript attacks that can lead to compromised accounts and credentials on websites.

* Enable or disable JavaScript on some websites using the _NoScript_ interface, if you use it.

This issue still affects _Tor Browser_ when it is restarted.

If _NoScript_ is activated, the _NoScript_ icon appears in the top-left corner
and _Tor Browser_ is safe:


If _NoScript_ is deactivated, the _NoScript_ icon is absent from the top-left
corner and _Tor Browser_ is unsafe:


To reactivate _NoScript_ without restarting Tails, do the following:

1. Open the address about:config in _Tor Browser_.


2. Click the **I accept the risk!** button.

3. At the top of the page, search for xpinstall.signatures.required.

4. Double-click on the **xpinstall.signatures.required** line in the results to set its value to **false**.

5. Verify that _NoScript_ is activated again.


XXX: Copy to security/noscript_disabled_in_tor_browser.mdwn

## Other upgrades and changes

* Remove the _OpenPGP Applet_ and _Pidgin_ notification icons from the top navigation bar.


You can still access the _OpenPGP Applet_ and _Pidgin_ notification icons from
the system tray in the bottom-left corner of the screen.

To display the system tray, move your mouse to the thin gray line in the
bottom-left of the screen, above the window list:


To move these icons back to the top navigation bar, execute the following
command in a _Terminal_:

gnome-shell-extension-tool --enable-extension=TopIcons@???

Until now, these icons were displayed in the top navigation bar by the
_TopIcons_ GNOME extension. This extension is unmaintained, causes GNOME to
crash ([#11188](https://redmine.tails.boum.org/code/issues/11188)), and will
not work in Tails 5.0 based on Debian 11 (Bullseye).

* Install localization packages only for the following languages:

    * Arabic
    * English
    * Farsi
    * French
    * German
    * Hindi
    * Indonesian
    * Italian
    * Portuguese
    * Russian
    * Simplified Chinese
    * Spanish
    * Turkish

You can install localization packages for other languages using the
_[Additional
Software](https://tails.boum.org/doc/first_steps/additional_software/index.en.html)_
feature.

Localization packages include:

    * _Thunderbird_ localization: packages thunderbird-l10n-lang
    * _LibreOffice_ localization: packages libreoffice-l10n-lang
    * Spell-checking dictionaries: packages hunspell-lang

Where lang is the code for your language. For example, es for Spanish.

* Add a suspend button to the system menu.


* Add suspend, restart, and shutdown buttons to the system menu when the screen is locked.

![](https://tails.boum.org/news/version_3.13.2/suspend-and-shutdown-while-
locked.png)

* Replace all non-Latin fonts with the [Noto fonts family](https://en.wikipedia.org/wiki/Noto%5Ffonts).

* Update _Debian_ to 9.9.

* Update _Thunderbird_ to 60.6.1.

## Fixed problems

* Fix the automatic configuration of new email accounts in _Thunderbird_. ([#16573](https://redmine.tails.boum.org/code/issues/16573))

* Prevent Tails from shutting down when waking up from suspend on some computers. ([#11729](https://redmine.tails.boum.org/code/issues/11729))

* Fix the import of the [Tails signing key](https://tails.boum.org/tails-signing.key) in the _Passwords and Keys_ utility. ([##15213](https://redmine.tails.boum.org/code/issues/#15213))

* Don't show notifications about _TailsData_ when configuring a persistent volume. ([#16632](https://redmine.tails.boum.org/code/issues/16632))


For more details, read our [changelog](https://git-
tails.immerda.ch/tails/plain/debian/changelog).

# Known issues

### Tails fails to start a second time on some computers
([#16389](https://redmine.tails.boum.org/code/issues/16389))

On some computers, after installing Tails to a USB stick, Tails starts a first
time but fails to start a second time. In some cases, only BIOS (Legacy) was
affected and the USB stick was not listed in the Boot Menu.

We are still investigating the issue, so if it happens to you, please report
your findings by email to [tails-testers@???](mailto:tails-
testers@???). Mention the model of the computer and the USB stick. This
mailing list is [archived publicly](https://lists.autistici.org/list/tails-
testers.html).

To fix this issue:

1. Reinstall your USB stick using the same installation method.

2. Start Tails for the first time and [set up an administration password](https://tails.boum.org/doc/first_steps/startup_options/administration_password/index.en.html).

3. Choose Applications ▸ System Tools ▸ Root Terminal to open a Root Terminal.

4. Execute the following command:

sgdisk --recompute-chs /dev/bilibop

You can also test an experimental image:

1. [Download the _.img_ file from our development server](https://nightly.tails.boum.org/build_Tails_ISO_bugfix-16389-recompute-chs/lastSuccessful/archive/build-artifacts/).

2. Install it using the same installation methods.

We don't provide any OpenPGP signature or other verification technique for
this test image. Please only use it for testing.

See the list of [long-standing
issues](https://tails.boum.org/support/known_issues/index.en.html).

# Get Tails 3.13.2

## To upgrade your Tails USB stick and keep your persistent storage

* Automatic upgrades are available from 3.12, 3.12.1, 3.13, and 3.13.1 to 3.13.2.

* If you cannot do an automatic upgrade or if Tails fails to start after an automatic upgrade, please try to do a [manual upgrade](https://tails.boum.org/upgrade/index.en.html).

## To install Tails on a new USB stick

Follow our installation instructions:

* [Install from Windows](https://tails.boum.org/install/win/index.en.html)
* [Install from macOS](https://tails.boum.org/install/mac/index.en.html)
* [Install from Linux](https://tails.boum.org/install/linux/index.en.html)

All the data on this USB stick will be lost.

## To download only

If you don't need installation or upgrade instructions, you can directly
download Tails 3.13.2:

* [For USB sticks (USB image)](https://tails.boum.org/install/download/index.en.html)
* [For DVDs and virtual machines (ISO image)](https://tails.boum.org/install/download-iso/index.en.html)

# What's coming up?

Tails 3.14 is [scheduled](https://tails.boum.org/contribute/calendar/) for May
14.

Have a look at our [roadmap](https://tails.boum.org/contribute/roadmap) to see
where we are heading to.

We need your help and there are many ways to [contribute to
Tails](https://tails.boum.org/contribute/index.en.html)
([donating](https://tails.boum.org/donate/?r=3.13.2) is only one of them).
Come [talk to us](https://tails.boum.org/about/contact/index.en.html#tails-
dev)!



URL: https://tails.boum.org/news/version_3.13.2/index.en.html
_______________________________________________
amnesia-news mailing list
amnesia-news@???
https://www.autistici.org/mailman/listinfo/amnesia-news
To unsubscribe from this list, send an email to amnesia-news-unsubscribe@???.