Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

update: [tailscale] #81

Closed
gdonval opened this issue Jul 26, 2024 · 2 comments · Fixed by #82
Closed

update: [tailscale] #81

gdonval opened this issue Jul 26, 2024 · 2 comments · Fixed by #82

Comments

@gdonval
Copy link
Contributor

gdonval commented Jul 26, 2024

Name: [tailscale
CVEs: CVE-2024-24790
CVSSs: 9.8
Action Needed: Update to 1.66+

Summary: The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.

refmap.gentoo: TBD
@tormath1 tormath1 mentioned this issue Jul 30, 2024
Merged
@tormath1
Copy link
Contributor

Thanks @gdonval - I opened: #82 to fix this. Will trigger a release right after.

@tormath1
Copy link
Contributor

Now released: https://github.com/flatcar/sysext-bakery/releases/download/latest/tailscale-1.70.0-x86-64.raw

@github-actions github-actions bot mentioned this issue Aug 22, 2024
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

release: bump tailscale flatcar/sysext-bakery
2 participants
@gdonval @tormath1