Release Notes (Version 7.2.314.3550)

Thank you for choosing Tanium. The following Release Notes document changes between releases of the Tanium Server.
This platform release includes the release of a Windows and Linux Tanium Server.
The previous Tanium Server versions can be found here: Release Notes (Version 7.2.314.3476)

Tanium Server for Windows and Linux v7.2.314.3550

General Availability Release Date: April 9, 2018

Major Features

• None.

Improvements

• The Tanium Platform components have been upgraded to use OpenSSL v1.0.2p.
• The Tanium platform components have been upgraded to use SQLite v3.26.0.

Security Updates

• This release includes security updates. Details of the issues, including affected versions and mitigation information, can be obtained within Tanium's Support Portal or by contacting your TAM.

Server Bug Fixes

• The new parameter clean_download_catalog_disabled (Server, Numeric, Default = 0 ) will disable the automatic /Downloads directory cleaning function.  Setting this parameter to a non-zero value overrides the settings of any other clean_download_catalog_* scheduling parameters.
• The Tanium Server installer will no longer remove or clobber the contents of the installedcacert.crt file, thus preserving needed certificates which have been placed previously into this file.
• Fixed an upgrade issue in the management of Question groups, where groups with id = 0 require special treatment and would cause the error: questions_subgroups should already have been migrated for question.
• Fixed a problem with TDownloader when displaying protected configurations that it cannot decrypt successfully, which would lead to the error message: Failed to finalize decryption.
• Fixed a condition where leader endpoints behind a NAT device would re-establish IP connections once every second, potentially overloading network devices in their communications path.
• Fixed the setting of NATAddressMask on a Tanium Zone Server to receive decimal numeric inputs, when before only hexadecimal values could be used.
• Fixed a problem in the PostgreSQL stored procedure named update package_files which would result in the following Tanium Server log error: SQL Exception: 42702 ERROR: column reference 'id' is ambiguous.
• Changed the behavior of the cycle_job_thread_interval parameter so it no longer triggers a sequence of maintenance tasks like database cleaning every time it is reached, and will now have a default value of 600 seconds.
• The Tanium Server now uses a default of RegistrationIntervalMinutes=2 when an explicit configuration is missing from Global Settings.
• Improved the robustness of the package and package file cleaning procedure to consider cases when a file is removed from a package and then added again, which could lead to a file being removed when still referenced. Setting clean_download_catalog_grace_period_hours to a very high value still remains a workaround for this issue in existing versions.
• The Tanium Server API now allows users with the Administrator privilege to remove plugin schedules, whether they are assigned the Execute Plugin privilege or not and whether the plugin scheduled exists or not.  This helps with plugin schedule cleanup tasks.
• Added foreign key indices on the users_user_group table to improve performance and avoid UI timeout errors on very large databases.
• Fixed an undesirable interaction with a dynamically linked LDAP library (libldap) used by the PostgreSQL library (libpq.so), which would cause a crash when running: TaniumServer database upgrade.
• Fixed a condition in the recycling of database connections in the Tanium Server where, in rare occasions, it could crash in the even of an outage in the database service.
• Fixed an issue with LDAP synchronization auditing where locked out user accounts (with locked_out=2) and deleted user groups (with deleted_flag=1) would be reported repeatedly into the users_audit with audit_text = locked out user from LdapSync and the user_groups_audit with audit_text = deleted user group from LdapSync , causing these tables to grow without bounds.

Known Issues and Workarounds

• None.

Additional Information

This version of Tanium Server shipped with Common UI Components version 1.2.2.0190.

Product Documentation and Resources

• Tanium Product Documentation
• Tanium User Research
• Software Updates and Announcements Signup