Commit 1fe1cfbb authored by Ulrike Uhlig's avatar Ulrike Uhlig
Browse files

Merge branch 'web/16170-other-ways-above-fold' of d53ykjpeekuikgoq.onion:tails...

Merge branch 'web/16170-other-ways-above-fold' of d53ykjpeekuikgoq.onion:tails into web/16170-other-ways-above-fold
parents b29ca48e 185424cd
A security vulnerability was discovered in the sandboxing
mechanism of *Firefox* and *Tor Browser*. This vulnerability allows a
malicious website to bypass some of the confinement built in *Firefox*,
which means possibly spying on the content of other tabs and steal
the passwords of other websites.
After *Tor Browser* has been compromised, the only reliable solution is
to restart Tails.
Because *Tor Browser* in Tails is [[confined using
*AppArmor*|doc/anonymous_internet/Tor_Browser#confinement]], only the
data accessible to *Tor Browser* might be compromised but not the other
applications or your other files. For example, a compromised *Tor
Browser* might access your files in the *Tor Browser* and
*Persistent/Tor Browser* folders but not anywhere else.
For example, without restarting Tails:
- It is unsafe to:
- Log in to a website and also visit an untrusted website.
Your password on the first website might be stolen by the untrusted website.
- Visit an untrusted website if you have sensitive information stored
in your *Persistent/Tor Browser* folder. The untrusted website might
access these files.
- It is safe to:
- Visit untrusted websites, without logging in, if you have no
sensitive information stored in your *Tor Browser* and
*Persistent/Tor Browser* folders.
- Log in to several trusted websites without visiting any untrusted
websites.
# SOME DESCRIPTIVE TITLE
# Copyright (C) YEAR Free Software Foundation, Inc.
# This file is distributed under the same license as the PACKAGE package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: PACKAGE VERSION\n"
"POT-Creation-Date: 2019-06-20 17:02+0000\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"Language: \n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
#. type: Plain text
msgid ""
"A security vulnerability was discovered in the sandboxing mechanism of "
"*Firefox* and *Tor Browser*. This vulnerability allows a malicious website "
"to bypass some of the confinement built in *Firefox*, which means possibly "
"spying on the content of other tabs and steal the passwords of other "
"websites."
msgstr ""
#. type: Plain text
msgid ""
"After *Tor Browser* has been compromised, the only reliable solution is to "
"restart Tails."
msgstr ""
#. type: Plain text
msgid ""
"Because *Tor Browser* in Tails is [[confined using "
"*AppArmor*|doc/anonymous_internet/Tor_Browser#confinement]], only the data "
"accessible to *Tor Browser* might be compromised but not the other "
"applications or your other files. For example, a compromised *Tor Browser* "
"might access your files in the *Tor Browser* and *Persistent/Tor Browser* "
"folders but not anywhere else."
msgstr ""
#. type: Plain text
msgid "For example, without restarting Tails:"
msgstr ""
#. type: Plain text
msgid "- It is unsafe to:"
msgstr ""
#. type: Bullet: ' - '
msgid ""
"Log in to a website and also visit an untrusted website. Your password on "
"the first website might be stolen by the untrusted website."
msgstr ""
#. type: Bullet: ' - '
msgid ""
"Visit an untrusted website if you have sensitive information stored in your "
"*Persistent/Tor Browser* folder. The untrusted website might access these "
"files."
msgstr ""
#. type: Plain text
msgid "- It is safe to:"
msgstr ""
#. type: Bullet: ' - '
msgid ""
"Visit untrusted websites, without logging in, if you have no sensitive "
"information stored in your *Tor Browser* and *Persistent/Tor Browser* "
"folders."
msgstr ""
#. type: Bullet: ' - '
msgid "Log in to several trusted websites without visiting any untrusted websites."
msgstr ""
......@@ -3,10 +3,11 @@
# This file is distributed under the same license as the PACKAGE package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: PACKAGE VERSION\n"
"POT-Creation-Date: 2018-09-18 06:11+0200\n"
"POT-Creation-Date: 2019-06-24 16:10+0200\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
......@@ -17,177 +18,223 @@ msgstr ""
#. type: Plain text
#, no-wrap
msgid "[[!meta date=\"Tue, 24 Jan 2017 12:34:56 +0000\"]]\n"
msgid "[[!meta date=\"Tue, 23 Jun 2019 12:34:56 +0000\"]]\n"
msgstr ""
#. type: Plain text
#, no-wrap
msgid "[[!pagetemplate template=\"news.tmpl\"]]\n"
msgid "[[!meta title=\"Tails 3.14.2 is out\"]]\n"
msgstr ""
#. type: Plain text
#, no-wrap
msgid "[[!meta title=\"Tails 2.10 is out\"]]\n"
msgid "[[!pagetemplate template=\"news.tmpl\"]]\n"
msgstr ""
#. type: Plain text
#, no-wrap
msgid "[[!tag announce]]\n"
msgstr "[[!tag announce]]\n"
msgstr ""
#. type: Plain text
msgid ""
"This release fixes [[many security issues|security/"
"Numerous_security_holes_in_2.9.1]] and users should upgrade as soon as "
"possible."
"This release is an emergency release to fix a critical security "
"vulnerability in *Tor Browser*."
msgstr ""
#. type: Plain text
msgid "You should upgrade as soon as possible."
msgstr ""
#. type: Plain text
#, no-wrap
msgid "[[!toc levels=1]]\n"
msgstr "[[!toc levels=1]]\n"
msgstr ""
#. type: Title #
#, no-wrap
msgid "Changes"
msgid "Changes and upgrades"
msgstr ""
#. type: Title ##
#. type: Bullet: '- '
msgid ""
"Update *Tor Browser* to "
"[8.5.3](https://blog.torproject.org/new-release-tor-browser-853), which "
"fixes a critical vulnerability in *Tor Browser*, a [[*sandbox "
"escape*|news/version_3.14.1#sandbox-escape]], that we couldn't fix in time "
"for 3.14.1."
msgstr ""
#. type: Title #
#, no-wrap
msgid "New features"
msgid "Fixed problems"
msgstr ""
#. type: Bullet: ' - '
#. type: Plain text
msgid ""
"We installed [[*OnionShare*|doc/anonymous_internet/onionshare]], a tool for "
"anonymous file sharing."
"For more details, read our [[!tails_gitweb debian/changelog "
"desc=\"changelog\"]]."
msgstr ""
#. type: Plain text
#, no-wrap
msgid " [[!img version_2.10/onionshare.png link=\"no\"]]\n"
msgid "<a id=\"known-issues\"></a>\n"
msgstr ""
#. type: Bullet: ' - '
#. type: Title #
#, no-wrap
msgid "Known issues"
msgstr ""
#. type: Title ##
#, no-wrap
msgid ""
"We enabled the [[circuit view|doc/anonymous_internet/"
"Tor_Browser#circuit_view]] in *Tor Browser*."
"Tails fails to start a second time on some computers ([[!tails_ticket "
"16389]])"
msgstr ""
#. type: Plain text
#, no-wrap
msgid " [[!img doc/anonymous_internet/Tor_Browser/circuit_view.png link=\"no\"]]\n"
msgid ""
"On some computers, after installing Tails to a USB stick, Tails starts a "
"first time but fails to start a second time. In some cases, only BIOS "
"(Legacy) was affected and the USB stick was not listed in the Boot Menu."
msgstr ""
#. type: Title ##
#. type: Plain text
#, no-wrap
msgid "Upgrades and changes"
msgid ""
"We partially fix this issue in 3.14.1 but are still investigating it, so if "
"it happens to you, please\n"
"report your findings by email to <tails-testers@boum.org>. Mention the\n"
"model of the computer and the USB stick. This mailing\n"
"list is [archived "
"publicly](https://lists.autistici.org/list/tails-testers.html).\n"
msgstr ""
#. type: Bullet: ' - '
msgid "Upgrade *Tor* to 0.2.9.9."
#. type: Plain text
msgid "To fix this issue:"
msgstr ""
#. type: Bullet: ' - '
msgid "Upgrade *Tor Browser* to 6.5."
#. type: Bullet: '1. '
msgid "Reinstall your USB stick using the same installation method."
msgstr ""
#. type: Bullet: ' - '
#. type: Bullet: '1. '
msgid ""
"Upgrade *Linux* to 4.8. This should improve the support for newer hardware "
"(graphics, Wi-Fi, etc.)"
"Start Tails for the first time and [[set up an administration "
"password|doc/first_steps/startup_options/administration_password]]."
msgstr ""
#. type: Bullet: ' - '
msgid "Upgrade *Icedove* to 45.6.0."
#. type: Bullet: '1. '
msgid ""
"Choose <span class=\"menuchoice\"> <span "
"class=\"guimenu\">Applications</span>&nbsp;▸ <span "
"class=\"guisubmenu\">System Tools</span>&nbsp;▸ <span "
"class=\"guimenuitem\">Root Terminal</span> </span> to open a <span "
"class=\"application\">Root Terminal</span>."
msgstr ""
#. type: Bullet: ' - '
msgid "Replace *AdBlock Plus* with *uBlock Origin*."
#. type: Bullet: '1. '
msgid "Execute the following command:"
msgstr ""
#. type: Bullet: ' - '
msgid "Configure the *APT* package manage to use Debian's Onion services."
#. type: Plain text
#, no-wrap
msgid " <p class=\"pre command\">sgdisk --recompute-chs /dev/bilibop</p>\n"
msgstr ""
#. type: Bullet: ' - '
msgid ""
"Install the *AMDGPU* display driver. This should improve the support for "
"newer AMD graphics adapters."
#. type: Plain text
msgid "You can also test an experimental image:"
msgstr ""
#. type: Bullet: ' - '
#. type: Bullet: '1. '
msgid ""
"Renamed the *Boot Loader Menu* entries from \"Live\" to \"Tails\", and "
"replaced the confusing \"failsafe\" wording with \"Troubleshooting Mode\"."
"[Download the *.img* file from our development "
"server](https://nightly.tails.boum.org/build_Tails_ISO_bugfix-16389-recompute-chs/lastSuccessful/archive/build-artifacts/)."
msgstr ""
#. type: Bullet: ' - '
msgid "Add support for [[!wikipedia exFAT]]."
#. type: Bullet: '1. '
msgid "Install it using the same installation methods."
msgstr ""
#. type: Bullet: ' - '
msgid "Remove *Nyx* (previously called *arm*)."
#. type: Plain text
#, no-wrap
msgid ""
" We don't provide any OpenPGP signature or other verification technique\n"
" for this test image. Please only use it for testing.\n"
msgstr ""
#. type: Bullet: ' - '
msgid ""
"Rewrite *Tor control port filter* entirely. Now Tails can safely support "
"*OnionShare*, the circuit view of *Tor Browser*, and similar. This also "
"enabled Whonix to replace their own similar piece of software with this one."
#. type: Plain text
msgid "See the list of [[long-standing issues|support/known_issues]]."
msgstr ""
#. type: Title #
#, no-wrap
msgid "Get Tails 3.14.2"
msgstr ""
#. type: Title ##
#, no-wrap
msgid "Fixed problems"
msgid "To upgrade your Tails USB stick and keep your persistent storage"
msgstr ""
#. type: Bullet: ' - '
msgid "Made *OnionCircuits* compatible with the *Orca* screen reader."
#. type: Bullet: '- '
msgid ""
"Automatic upgrades are available from 3.13, 3.13.1, 3.13.2, 3.14, and 3.14.1 "
"to 3.14.2."
msgstr ""
#. type: Plain text
#. type: Bullet: '- '
msgid ""
"For more details, read our [[!tails_gitweb debian/changelog desc=\"changelog"
"\"]]."
"If you cannot do an automatic upgrade or if Tails fails to start after an "
"automatic upgrade, please try to do a [[manual upgrade|upgrade]]."
msgstr ""
#. type: Title #
#. type: Title ##
#, no-wrap
msgid "Known issues"
msgstr "مشکلات شناسایی‌شده"
msgid "To install Tails on a new USB stick"
msgstr ""
#. type: Plain text
msgid "None specific to this release."
msgid "Follow our installation instructions:"
msgstr ""
#. type: Plain text
msgid "See the list of [[long-standing issues|support/known_issues]]."
#. type: Bullet: ' - '
msgid "[[Install from Windows|install/win]]"
msgstr ""
#. type: Title #
#, no-wrap
msgid "Get Tails 2.10"
#. type: Bullet: ' - '
msgid "[[Install from macOS|install/mac]]"
msgstr ""
#. type: Plain text
msgid "- To install, follow our [[installation instructions|install]]."
#. type: Bullet: ' - '
msgid "[[Install from Linux|install/linux]]"
msgstr ""
#. type: Plain text
#, no-wrap
msgid ""
"- To upgrade, an automatic upgrade is available from 2.7 and 2.9.1 to 2.10."
"<div class=\"caution\"><p>All the data on this USB stick will be "
"lost.</p></div>\n"
msgstr ""
#. type: Plain text
#. type: Title ##
#, no-wrap
msgid ""
" If you cannot do an automatic upgrade or if you fail to start after an\n"
" automatic upgrade, please try to do a [[manual upgrade|upgrade]].\n"
msgid "To download only"
msgstr ""
#. type: Plain text
msgid "- [[Download Tails 2.10.|install/download]]"
msgid ""
"If you don't need installation or upgrade instructions, you can directly "
"download Tails 3.14.2:"
msgstr ""
#. type: Bullet: ' - '
msgid "[[For USB sticks (USB image)|install/download]]"
msgstr ""
#. type: Bullet: ' - '
msgid "[[For DVDs and virtual machines (ISO image)|install/download-iso]]"
msgstr ""
#. type: Title #
......@@ -196,7 +243,7 @@ msgid "What's coming up?"
msgstr ""
#. type: Plain text
msgid "Tails 2.11 is [[scheduled|contribute/calendar]] for March 3rd."
msgid "Tails 3.15 is [[scheduled|contribute/calendar]] for July 9."
msgstr ""
#. type: Plain text
......@@ -207,6 +254,8 @@ msgstr ""
#, no-wrap
msgid ""
"We need your help and there are many ways to [[contribute to\n"
"Tails|contribute]] (<a href=\"https://tails.boum.org/donate/?r=2.10\">donating</a> is only one of\n"
"Tails|contribute]] (<a "
"href=\"https://tails.boum.org/donate/?r=3.14.2\">donating</a> is only one "
"of\n"
"them). Come [[talk to us|about/contact#tails-dev]]!\n"
msgstr ""
......@@ -3,10 +3,11 @@
# This file is distributed under the same license as the PACKAGE package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: PACKAGE VERSION\n"
"POT-Creation-Date: 2018-09-18 06:11+0200\n"
"POT-Creation-Date: 2019-06-24 16:10+0200\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
......@@ -17,133 +18,150 @@ msgstr ""
#. type: Plain text
#, no-wrap
msgid "[[!meta date=\"Tue, 07 Mar 2017 12:34:56 +0000\"]]\n"
msgid "[[!meta date=\"Tue, 23 Jun 2019 12:34:56 +0000\"]]\n"
msgstr ""
#. type: Plain text
#, no-wrap
msgid "[[!pagetemplate template=\"news.tmpl\"]]\n"
msgid "[[!meta title=\"Tails 3.14.2 is out\"]]\n"
msgstr ""
#. type: Plain text
#, no-wrap
msgid "[[!meta title=\"Tails 2.11 is out\"]]\n"
msgid "[[!pagetemplate template=\"news.tmpl\"]]\n"
msgstr ""
#. type: Plain text
#, no-wrap
msgid "[[!tag announce]]\n"
msgstr "[[!tag announce]]\n"
msgstr ""
#. type: Plain text
msgid ""
"This release fixes [[many security issues|security/"
"Numerous_security_holes_in_2.10]] and users should upgrade as soon as "
"possible."
"This release is an emergency release to fix a critical security "
"vulnerability in *Tor Browser*."
msgstr ""
#. type: Plain text
msgid "You should upgrade as soon as possible."
msgstr ""
#. type: Plain text
#, no-wrap
msgid "[[!toc levels=1]]\n"
msgstr "[[!toc levels=1]]\n"
msgstr ""
#. type: Title #
#, no-wrap
msgid "Changes"
msgid "Changes and upgrades"
msgstr ""
#. type: Plain text
#. type: Bullet: '- '
msgid ""
"We are very sad to announce that Tails 2.11 will be the last version to "
"include [I2P](https://geti2p.net/), an alternative anonymizing network."
"Update *Tor Browser* to "
"[8.5.3](https://blog.torproject.org/new-release-tor-browser-853), which "
"fixes a critical vulnerability in *Tor Browser*, a [[*sandbox "
"escape*|news/version_3.14.1#sandbox-escape]], that we couldn't fix in time "
"for 3.14.1."
msgstr ""
#. type: Title #
#, no-wrap
msgid "Fixed problems"
msgstr ""
#. type: Plain text
msgid ""
"Maintaining software like I2P well-integrated in Tails takes time and effort "
"and our team is too busy with other priorities. Unfortunately, we failed to "
"find a developer outside of our team to maintain I2P in Tails. As a "
"consequence, the last version of I2P being shipped in Tails is *0.9.25*, "
"which is nearly one year old now at this moment."
"For more details, read our [[!tails_gitweb debian/changelog "
"desc=\"changelog\"]]."
msgstr ""
#. type: Plain text
msgid ""
"But we will be happy to reintroduce I2P if we find a volunteer to take care "
"of maintaining it in Tails. If you are a developer and care about I2P in "
"Tails, that person could be you! Come [[talk to us|about/contact#tails-dev]]!"
#, no-wrap
msgid "<a id=\"known-issues\"></a>\n"
msgstr ""
#. type: Title ##
#. type: Title #
#, no-wrap
msgid "New features"
msgid "Known issues"
msgstr ""
#. type: Bullet: ' - '
#. type: Title ##
#, no-wrap
msgid ""
"If running on a 32-bit processor, notify the user that it won't be able to "
"start Tails 3.0 anymore. ([[!tails_ticket 12193]])"
"Tails fails to start a second time on some computers ([[!tails_ticket "
"16389]])"
msgstr ""
#. type: Bullet: ' - '
#. type: Plain text
msgid ""
"Notify I2P users that I2P will be removed in Tails 2.12. ([[!tails_ticket "
"12271]])"
"On some computers, after installing Tails to a USB stick, Tails starts a "
"first time but fails to start a second time. In some cases, only BIOS "
"(Legacy) was affected and the USB stick was not listed in the Boot Menu."
msgstr ""
#. type: Title ##
#. type: Plain text
#, no-wrap
msgid "Upgrades and changes"
msgid ""
"We partially fix this issue in 3.14.1 but are still investigating it, so if "
"it happens to you, please\n"
"report your findings by email to <tails-testers@boum.org>. Mention the\n"
"model of the computer and the USB stick. This mailing\n"
"list is [archived "
"publicly](https://lists.autistici.org/list/tails-testers.html).\n"
msgstr ""
#. type: Bullet: ' - '
msgid "Upgrade Tor Browser to 6.5.1."
#. type: Plain text
msgid "To fix this issue:"
msgstr ""
#. type: Bullet: ' - '
msgid ""
"Fix CVE-2017-6074 (local root privilege escalation) by disabling the `dccp` "
"module. ([[!tails_ticket 12280]]) Also disable kernel modules for some other "
"uncommon network protocols. (Part of [[!tails_ticket 6457]])"
#. type: Bullet: '1. '
msgid "Reinstall your USB stick using the same installation method."
msgstr ""
#. type: Title ##
#, no-wrap
msgid "Fixed problems"
#. type: Bullet: '1. '
msgid ""
"Start Tails for the first time and [[set up an administration "
"password|doc/first_steps/startup_options/administration_password]]."
msgstr ""
#. type: Bullet: ' - '
#. type: Bullet: '1. '
msgid ""
"Tor Browser: Don't show offline warning when opening the local documentation "
"of Tails. ([[!tails_ticket 12269]])"
"Choose <span class=\"menuchoice\"> <span "
"class=\"guimenu\">Applications</span>&nbsp;▸ <span "
"class=\"guisubmenu\">System Tools</span>&nbsp;▸ <span "
"class=\"guimenuitem\">Root Terminal</span> </span> to open a <span "
"class=\"application\">Root Terminal</span>."
msgstr ""
#. type: Bullet: '1. '
msgid "Execute the following command:"
msgstr ""
#. type: Plain text
#, no-wrap
msgid ""
" - Fix rare issue causing automatic upgrades to not apply properly\n"
" ([[!tails_ticket 8449]] and [[!tails_ticket 11839]])\n"
msgid " <p class=\"pre command\">sgdisk --recompute-chs /dev/bilibop</p>\n"
msgstr ""
#. type: Bullet: ' - '
msgid ""
"Install Linux 4.8.15 to prevent GNOME from freezing with Intel GM965/GL960 "
"Integrated Graphics. ([[!tails_ticket 12217]])"
#. type: Plain text
msgid "You can also test an experimental image:"
msgstr ""
#. type: Plain text
#. type: Bullet: '1. '