Skip to content

v0.68.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 29 May 23:32
· 4395 commits to main since this release
v0.68.2
003433f
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

⚠️ Critical for v0.68.0 / v0.68.1 Windows self-hosters

  • The v0.68.0 and v0.68.1 Windows agents are dead on arrival — treat them as do-not-deploy. The PAM ETW LUA subscriber (#959) called etw.NewRealTimeConsumer(nil), and the library's context.WithCancel(parent) panics with cannot create context from nil parent. Because startETWLua only gated on privilege.IsRunningAsRoot() (always true for the SYSTEM service) and EnableProvider always succeeds for SYSTEM, every Windows host running the agent as the normal SYSTEM service reached the nil-context call and crash-looped on startup (~1s after broker init). MSI in-place upgrades hit Error 1920 and roll back — so endpoints attempting an MSI upgrade safely stay on their prior working agent — but binary-swap auto-update channels crash-loop. macOS and Linux are unaffected (ETW is Windows-only and stubbed elsewhere). CI cross-compiles but never runs the Windows agent, so the panic was not caught (#999).

Fixed

  • Windows agent no longer crashes on startup. NewRealTimeConsumer is now passed context.Background() instead of nil, eliminating the ETW consumer panic. The consumer remains leak-free — it is explicitly stopped via etwSession.Stop() → consumer.Stop(), invoked from etwlua.Start's defer sub.Stop() on ctx.Done(). Verified on a real Windows VM: the fixed agent boots, logs etwlua started / agent is running, and stays up with no panic (#999).

Full Changelog: v0.68.1...v0.68.2

Assets 30
Loading