Skip to content

MirvMon v0.6.7

Choose a tag to compare

View all tags
@github-actions github-actions released this 05 Sep 11:30
· 2 commits to master since this release
v0.6.7
13f5997

MirvMon v0.6.7

Windows installer enrollment hardening.

  • Windows download links now carry a single-use download ticket only. The ticket is consumed as soon as MirvMon accepts the first EXE-generation request.
  • MirvMon then mints a different one-time activation credential and embeds only that value into the generated MirvMon-Agent-Setup.exe. The URL secret and installer secret are purpose-separated and stored in different database tables.
  • Reusing the same Windows download URL returns 403; normal activation still exchanges the embedded credential for the permanent agent configuration over HTTPS.
  • Explicit agent-token rotation invalidates both outstanding download tickets and installer activation credentials.
  • A failed NSIS package build revokes the newly minted activation credential instead of leaving an unused live secret behind.
  • Disaster-recovery normalization consumes transient Windows download tickets just like other installer credentials.
  • Previously generated but not yet downloaded Windows installer links must be regenerated after upgrading to v0.6.7. Installed agents and their permanent credentials are unchanged.

For Docker/Portainer use ghcr.io/mirivlad/mirvmon:0.6.7 and perform the normal re-pull/redeploy.

Assets 2
Loading