Zum Inhalt springen

Headscale Release Notes

2 Einträge aus 1 Quelle. Zuletzt aktualisiert:

Angaben zum Datum

Datum aus der Quelle.

Erstmals gesehen am .

Headscale

Headscale 0.29.4: Fehlerbehebungen und gehärteter OIDC-Callback

Headscale v0.29.4 behebt unter anderem einen Absturz der Tailscale-Android-App durch einen Node in der eigenen Peer-Liste, das offene Long Poll nach dem Löschen eines Nodes, Probleme beim interaktiven OIDC-Login nach Seiten-Reload und zählende HTTP-Metriken, die bisher nur OPTIONS-Anfragen erfassten, und härtet zudem den OIDC-Callback ab.

Minimum supported Tailscale client version: v1.80.0

Changes

  • Fix a node being listed among its own peers in an incremental map update, which crashes the Tailscale Android app on the device list #3459
  • Fix deleting a node leaving its long poll open, so the client stayed connected instead of asking for a new login #3449
  • Fix interactive OIDC login when the confirmation page is reloaded by an ad blocker, back navigation, or pull-to-refresh; the confirmation page now has its own URL, keeping single-use authorization codes out of reloads #3448
  • Harden the OIDC callback: state and nonce cookies take their Secure flag from server_url so they survive a TLS-terminating proxy, a callback state is single-use, and an invalid oidc.issuer or a missing oidc.client_id/oidc.client_secret now fails at startup #3334
  • Fix HTTP metrics only counting OPTIONS requests, so http_requests_total and http_request_duration_seconds now cover regular traffic #3414
  • Fix extra-records filewatcher hanging on shutdown after the watched file is deleted, and leaking the watcher when setup fails #3437 …

Originalquelle(öffnet in neuem Tab)Problem melden

Angaben zum Datum

Datum aus der Quelle.

Erstmals gesehen am .

Headscale

Headscale 0.29.3: Fixes bei Registrierung getaggter Nodes

Headscale v0.29.3 behebt Probleme bei der erneuten Authentifizierung und Registrierung getaggter Nodes, hängengebliebene ephemere Nodes und fälschliche 401-Timeouts bei der Registrierung und verschärft zudem Prüfungen bei der Registrierungsabfrage und bei /key-Anfragen.

Minimum supported Tailscale client version: v1.80.0

Changes

  • Fix tagged node stuck expired after tailscale logout, unable to re-authenticate #3394
  • Re-registering a tagged node with a different pre-auth key now applies the new key's tags instead of silently keeping the old ones #3394
  • Fix re-authenticating an already-tagged node with --advertise-tags being rejected when the authenticating user owns the tags #3394
  • Fix ephemeral nodes lingering as disconnected after reconnect churn #3383
  • Fix node registration falsely returning 401 registration timed out when auth completes as the request context expires #3392
  • Check the machine key on the followup registration poll so a leaked auth ID cannot return the registering user's identity #3393
  • Reject /key requests below the supported capability version floor, matching /ts2021 #3391

Upgrade

Please follow the steps outlined in the upgrade guide to update your existing Headscale installation.

Changelog

  • 235a57ec31388901a78d054b1adb9dff900658cc CHANGELOG: add 0.29.3 …

Originalquelle(öffnet in neuem Tab)Problem melden