megachangelog
Security1.102.3

Tailscale v1.102.3

This release includes a security fix for host-scoped IPv4 destinations in 4via6 addresses (TS-2026-011), Go runtime update to 1.26.6, and multiple platform-specific fixes for MagicDNS, Tailnet Lock startup, Windows installer, and memory usage on iOS and tvOS.

All Platforms
  • Changed: Go is updated to version 1.26.6.
  • Fixed: Tailscale refuses host-scoped IPv4 destinations at every point that acts on an unmapped 4via6 address. This fix addresses a security vulnerability described in TS-2026-011.
  • Fixed: When MagicDNS is disabled, unqualified hostnames are correctly forwarded to the configured nameservers.
  • Fixed: Resolved an issue where nodes with Tailnet Lock enabled on large tailnets would experience startup failures.
Windows
  • Fixed: Resolved an issue where the Windows installer would fail during an upgrade when the name of the user's home directory contained a space.
  • Fixed: tailscaled returns an error instead of panicking on devices where IPv6 or NetBios over TCP/IP is disabled.
iOS
  • Fixed: Memory usage is reduced for iOS devices on large tailnets.
tvOS
  • Fixed: Memory usage is reduced for tvOS devices on large tailnets.
securityfixmagicdnstailnet-lockiostvoswindows

Source: original entry ↗