Tailscale package is outdated, affected by a known security issue

Ask Fedora
, ,
1

Hi

I just installed a fresh system with Fedora Workstation and, upon logging in my Tailscale account, I have seen the following notice:

Screenshot From 2026-01-15 15-46-45
Screenshot From 2026-01-15 15-46-451762×358 93 KB

The first blurred computer on the screenshot is running Silverblue, the second Fedora Workstation.

The package that is provided by Fedora repos has been built in August 2025:

$ rpm -qi tailscale
Name        : tailscale
Version     : 1.84.1
Release     : 3.fc43
Architecture: x86_64
Install Date: Thu 15 Jan 2026 15:35:33
Group       : Unspecified
Size        : 42717028
License     : BSD-2-Clause AND MIT AND Apache-2.0 AND MPL-2.0 AND GPL-3.0-or-later AND ISC AND 0BSD AND BSD-3-Clause
Signature   :
              RSA/SHA256, Sun 17 Aug 2025 14:41:07, Key ID 829b606631645531
Source RPM  : tailscale-1.84.1-3.fc43.src.rpm
Build Date  : Sat 16 Aug 2025 18:52:49
Build Host  : buildvm-x86-17.rdu3.fedoraproject.org
Packager    : Fedora Project
Vendor      : Fedora Project
URL         : https://github.com/tailscale/tailscale
Bug URL     : https://bugz.fedoraproject.org/tailscale
Summary     : The easiest, most secure way to use WireGuard and 2FA
Description :
The easiest, most secure way to use WireGuard and 2FA.

So my questions are:

  1. In these scenarios, what is the best channel to fill a bug report or issue on Fedora Project to get that package upgraded?
  2. If I decide to use the tailscale own RPM repo for the time being:
    1. how can I prioritise it over Fedora’s, so that I don’t have conflicts or have to put extra command line arguments to dnf for the upgrades to come from their repository?
    2. How would I do it for rpm-ostree as well?
    3. Would the above break unattended / periodical upgrades of any of Silverblue or Workstation?

Thanks

1 Like
2

I answer myself the first question! However, that bugzilla page seems quite unattended. Not sure if the issues are being picked up.

The second (group of) question(s) are still valid.

3

If you don’t get a reply on Bugzilla,

you can find the maintainers email address on the Fedora Packages page for Tailscale.
If that does not get a response, you could use a mailing list or Matrix room to contact the devel community.
Of course do give a week or two before escalating.

1 Like
4

I’m not familiar with the tailscale package/application, I haven’t tested it personally, but I think the following should work for Fedora Silverblue.

You probably installed tailscale with something like sudo rpm-ostree install tailscale, so you will need to uninstall it with sudo rpm-ostree uninstall tailscale and reboot the machine.

Then follow these instructions:

Silverblue’s unattended/periodic updates should not be affected, and the Tailscale app should also be updated. However, upgrading between major versions, for example from F43 to F44, may be affected. In that case, you need to uninstall the Tailscale application, upgrade the system to the next major version, reboot, and install the Tailscale application again.

1 Like