Security audit of automatic upgrades and recent changes
conclusion:
...strong security impression, addressing most anonymity-related concerns. We did not find any remote code execution vulnerabilities, and all identified issues required a compromised low-privileged amnesia user – the default user in Tails.
Looking back at the previous audit, we can see the #Tails developers have made significant progress, demonstrating expertise and a serious commitment to security.
https://tails.net/news/audit_by_ROS_2024/index.en.html
Tails
npub1ms…mykma
2025-05-21 09:43:44 UTC
Author Public Key
npub1msm4q5pg2anpmast88zhr7cwlcnlfyjw4ukl06wh82s55d8hp54s8mykmaSeen on
wss://relay.mostr.pubPublished at
2025-05-21 09:43:44 UTCEvent JSON
{
"id": "224550cc59f7263befe76bb4a7ac163ba8a9f6780f71b74783cf0d58386bae10",
"pubkey": "dc3750502857661df60b39c571fb0efe27f4924eaf2df7e9d73aa14a34f70d2b",
"created_at": 1747820624,
"kind": 1,
"tags": [
[
"t",
"tails"
],
[
"proxy",
"https://fosstodon.org/users/tails/statuses/114545172427795145",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.mostr.pub"
]
],
"content": "Security audit of automatic upgrades and recent changes\n\nconclusion:\n...strong security impression, addressing most anonymity-related concerns. We did not find any remote code execution vulnerabilities, and all identified issues required a compromised low-privileged amnesia user – the default user in Tails.\n\nLooking back at the previous audit, we can see the #Tails developers have made significant progress, demonstrating expertise and a serious commitment to security.\n\nhttps://tails.net/news/audit_by_ROS_2024/index.en.html",
"sig": "9683fd4d8b8f283f7e6cd9b642f9bf91b833a5ef54104595c9692b3901dadbf7a747e250ed1d21b329e7045cea1514364704240c05df63eb5563801c5412a7c1"
}