Zen

Source string Source string

39/10000 · 39

The string is read only.

English Actions
[[!meta date="Mon, 24 May 2022 12:34:56 -0000"]]
[[!meta title="Serious security vulnerability in Tails 5.0"]]
[[!pagetemplate template="news.tmpl"]]
[[!tag security/fixed]]
*Tor Browser* in Tails 5.0 and earlier is unsafe to use for sensitive
information.
**We recommend that you stop using Tails until the release of 5.1 (early June) if
you use *Tor Browser* for sensitive information (passwords, private messages,
personal information, etc.).**
A security vulnerability was discovered in the JavaScript engine of *Firefox* and *Tor Browser*. See the [Mozilla Foundation Security Advisory 2022-19](https://www.mozilla.org/en-US/security/advisories/mfsa2022-19/)
This vulnerability allows a malicious website to bypass some of the security built in *Tor Browser* and access information from other websites.
For example, after you visit a malicious website, an attacker controlling this website might access the password or other sensitive information that you send to other websites afterwards during the same Tails session.
This vulnerability doesn't break the anonymity and encryption of Tor connections.
For example, it is still safe and anonymous to access websites from Tails if you don't share sensitive information with them.
After *Tor Browser* has been compromised, the only reliable solution is to restart Tails.
Other applications in Tails are not vulnerable. *Thunderbird* in Tails is not vulnerable because JavaScript is disabled.
The *Safest* [[security level of *Tor Browser*|doc/anonymous_internet/Tor_Browser#security-level]] is not affected because JavaScript is disabled at this security level.
This vulnerability will be fixed in Tails 5.1 (early June), but our team doesn't have the capacity to publish an emergency release earlier.

Loading…

None

Source string added

  1. Tails
  2. wiki/src/security/prototype_pollution.*.po
  3. English
[[!pagetemplate template="news.tmpl"]]
2 years ago
Browse all string changes

Things to check

Multiple failing checks

Following checks are failing:
Inconsistent: German, Persian, Indonesian, Italian, Polish, Portuguese, Russian, Turkish, Chinese (Taiwan) (zh_TW), Arabic, Serbian (latin), Chinese (zh), French

Reset

Glossary

English English
No related strings found in the glossary.

String information

Source string description
type: Plain text
Flags
no-wrap, read-only
String age
2 years ago
Last updated
11 months ago
Source string age
2 years ago
Translation file
string 3