Release notes for the latest version

This release is an emergency release to fix critical security vulnerabilities in the Linux kernel and the expat XML library.

Changes and updates

Update the Linux kernel to 6.12.100, which fixes CVE-2026-64560, a vulnerability that could allow Tor Browser in Tails to gain administrator privileges.

For example, if a malicious website that you visit is able to exploit CVE-2026-64560, they might take full control of your Tails and deanonymize you.

This attack is very unlikely but could be performed by a strong attacker, such as a government or a hacking firm. We are not aware of this attack being used in practice until now.
Update the expat XML library to 2.8.2, which fixes DSA-6404-1, a set of vulnerabilities that could allow different applications in Tails to gain administrator privileges.

For example, if an attacker tricks you into opening a malicious file in an application that uses expat, such as LibreOffice, Audacity, or Git, they might then use one of these vulnerabilities to take full control of your Tails and deanonymize you.

This attack is very unlikely but could be performed by a strong attacker, such as a government or a hacking firm. We are not aware of this attack being used in practice until now.
Compress automatic upgrades with zstd for a faster startup, as we already did for the USB image in Tails 7.0.
Make USB images and automatic upgrades 70 MB smaller by removing unused firmware.

For more details, read our changelog.

Automatic upgrades are available from Tails 7.0 or later to 7.10.1.
If you cannot do an automatic upgrade or if Tails fails to start after an automatic upgrade, please try to do a manual upgrade.

The Persistent Storage on the USB stick will be lost if you install instead of upgrading.

If you don't need installation or upgrade instructions, you can download Tails 7.10.1 directly: