Whonix 18.2.4.2 - Point Release!

Patrick · October 24, 2026, 4:40pm

Download

Alternatively, an in-place release upgrade is possible using the Whonix repository.

This release would not have been possible without the numerous supporters of Whonix!

Please Donate!

Please Contribute!

Fixed a clearnet leak in Non-Qubes-Whonix that could be triggered by a compromised Whonix-Workstation. (Thanks to @viajred for responsibly disclosing this security vulnerability!)
- whonix-firewall: IPv6 has no kernel equivalent of rp_filter. Added IPv6 uRPF anti-spoofing nftables rules to prevent packets with forged source addresses from a compromised Whonix-Workstation from reaching the clearnet.
  - A full write-up by the reporter will be linked here once published.
  - (Updated/fixed whonix-firewall package available in the Whonix stable repository since 05 October 2026)
- Related: Vulnerability bug reports by viajred [AI assisted]
Fixed a local privilege escalation vulnerability in a script in the legacy-dist package. (Thanks to Uladzislau Hryharovich for responsibly disclosing this security vulnerability!)
- (The updated/fixed legacy-dist package was already available in the stable repository before this release announcement.)
- A full write-up by the reporter will be linked here once published.