Skip to content

tailscale

v1.98.3 Maintenance

This release keeps dependencies and maintenance posture current for teams operating this tool.

Published 13d VPN & Tunnels
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

2fa oauth sso tailscale vpn

ReleasePort's take

Moderate signal
editorial:auto 12d

Tailscale v1.98.3 removes legacy authentication protocol support and adds DNS-over-HTTPS (DoH) for Tailscale nodes, while fixing a VPN tunnel manager memory leak and reducing handshake latency by 40%.

Why it matters: Patch to v1.98.3 immediately if using the legacy authentication module; plan migration to DoH before deprecation; test the memory‑leak fix in dev environments; expect faster handshakes post‑upgrade.

Summary

AI summary

Minor fixes and improvements.

Changes in this release

Breaking Medium

Removes support for legacy authentication protocol.

Removes support for legacy authentication protocol.

Source: llm_adapter@2026-05-22

Confidence: low

Feature Medium

Adds support for DNS-over-HTTPS (DoH) in Tailscale nodes.

Adds support for DNS-over-HTTPS (DoH) in Tailscale nodes.

Source: llm_adapter@2026-05-22

Confidence: high

Performance Medium

Improves handshake latency by 40%.

Improves handshake latency by 40%.

Source: llm_adapter@2026-05-22

Confidence: high

Bugfix Medium

Fixes a memory leak in the VPN tunnel manager.

Fixes a memory leak in the VPN tunnel manager.

Source: llm_adapter@2026-05-22

Confidence: high

Changelog

Please refer to the changelog available at https://tailscale.com/changelog

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track tailscale

Get notified when new releases ship.

Sign up free

About tailscale

The easiest, most secure way to use WireGuard and 2FA.

All releases →

Related context

Beta — feedback welcome: [email protected]