CVE-2022-41924 – tailscaled can be used to remotely execute code

Re:CVE-2022-41924 – tailscaled can be used to remotely execu... by mayakacz on Monday November 21, 2022 @01:33PM (#33696109)

Tailscalar here.

The Windows client caches the current version for a while, so may not yet have v1.32.3 available on your device. In that case, you can still pull the latest release from http://pkgs.tailscale.com/stable.

[ Parent | on HN ]

Re:CVE-2022-41924 – tailscaled can be used to remotely execu... by jakedata on Monday November 21, 2022 @01:35PM (#33696135)

Tailscale admin here, politely requesting client update push capability. Being able to see endpoint version is helpful, I will be suspending unpatched endpoints in the near future.

[ Parent | on HN ]

Re:CVE-2022-41924 – tailscaled can be used to remotely execu... by more_corn on Monday November 21, 2022 @02:09PM (#33696506)

Seconded

[ Parent | on HN ]

Re:CVE-2022-41924 – tailscaled can be used to remotely execu... by Scottn1 on Tuesday November 22, 2022 @01:46AM (#33702839)

Thirded

Or Get Tailscale in the Windows Store so it could auto update for all the endpoints out in the wild I don't control (company laptops, users home PCs, etc). Trying to get TEN people to manually update today was a pain, I can't imagine even triple that.

[ Parent | on HN ]

Re:CVE-2022-41924 – tailscaled can be used to remotely execu... by sedatk on Monday November 21, 2022 @07:53PM (#33700399)

`winget upgrade tailscale.tailscale` works too.

[ Parent | on HN ]