This release is an emergency release to fix critical security vulnerabilities
in the Linux kernel and the expat XML library.
Changes and updates
Update the Linux kernel to 6.12.100, which fixes CVE-2026-64560,
a vulnerability that could allow Tor Browser in
Tails to gain administrator privileges.
For example, if a malicious website that you visit is able to exploit
CVE-2026-64560, they might take full control of your Tails and deanonymize
you.
This attack is very unlikely but could be performed by a strong attacker,
such as a government or a hacking firm. We are not aware of this attack being
used in practice until now.
Update the expat XML library to 2.8.2, which fixes
DSA-6404-1, a set
of vulnerabilities that could allow different applications in Tails to gain
administrator privileges.
For example, if an attacker tricks you into opening a malicious file in an
application that uses expat, such as LibreOffice, Audacity, or Git,
they might then use one of these vulnerabilities to take full control of your
Tails and deanonymize you.
This attack is very unlikely but could be performed by a strong attacker,
such as a government or a hacking firm. We are not aware of this attack being
used in practice until now.
Compress automatic upgrades with
zstdfor a faster startup, as we already
did for the USB image in Tails 7.0.Make USB images and automatic upgrades 70 MB smaller by removing unused
firmware.
For more details, read our changelog.
Get Tails 7.10.1
To upgrade your Tails USB stick and keep your Persistent Storage
Automatic upgrades are available from Tails 7.0 or later to 7.10.1.
If you cannot do an automatic upgrade or if Tails fails to start after an
automatic upgrade, please try to do a manual upgrade.
To install Tails 7.10.1 on a new USB stick
Follow our installation instructions.
The Persistent Storage on the USB stick will be lost if
you install instead of upgrading.
To download only
If you don't need installation or upgrade instructions, you can download
Tails 7.10.1 directly: