—
GO-2023-1671
Non-interactive Tailscale SSH sessions on FreeBSD may use the effective group ID of the tailscaled process in tailscale.com
Quick fix
GO-2023-1671 — tailscale.com: upgrade to the fixed version with the command below.
go get tailscale.com@v1.38.2Details
Non-interactive Tailscale SSH sessions on FreeBSD may use the effective group ID of the tailscaled process in tailscale.com
Are you affected?
Enter the version of the package you're using.
Affected packages
References
- https://github.com/tailscale/tailscale/security/advisories/GHSA-vfgq-g5x8-g595[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2023-28436[ADVISORY]
- https://github.com/tailscale/tailscale/commit/d00c046b723dff6e3775d7d35f891403ac21a47d[WEB]
- https://github.com/tailscale/tailscale/releases/tag/v1.38.2[WEB]
- https://tailscale.com/security-bulletins/#ts-2023-003[WEB]