Release Notes Tanium Server (Version 7.3.314.4250)

Thank you for choosing Tanium.  The following Release Notes document changes between releases of the Tanium Server.
This platform release includes the release of both a Windows and Linux Tanium Server.
The previous version can be found here: Release Notes (Version 7.3.314.4147)

Tanium Server for Windows and Linux v7.3.314.4250

General Availability Release Date: Dec 10, 2019.

Special Notes

• Due to security issues against this release of Tanium Server, Tanium strongly recommends upgrading to at least v7.3.314.4324 if you are using this version.

New Features

• The Tanium Server API now offers an option called filter_by_groups_with_tracking which allows a caller to specify a set of Computer Groups to specify the Computer IDs by which a question result should be filtered and, if necessary, aggregated. This enhancement will be used by modules like Patch for better reporting of machines by Computer Groups.
• The Tanium Server REST-API now offers a specific route to perform Action Approval.

Improvements

• The Tanium Server now stores internally filtered rows as well as all rows for GRD and GMRD requested with specialized filters. This is done in order to improve the performance of result paging during retrieval.
• The Tanium Server API now supports the option filter_by_groups_with_tracking_recent_data_threshold to specify the maximum age in seconds of the known clients that should be kept in the result set.
• The Tanium Server now allows for the use of the Token API (/api_tokens/) without the having to provide a token ID.
• Added efficiencies for <object_list> queries and particularly those that retrieve multiple <question>> objects by their individual id values, which is a common use in the Tanium console's Saved Questions page.
• The Tanium Server now uses expat v2.2.9.
• The Tanium Server now ships with Console v1.3.3.0150.
• Improved performance in handling of TLS connections through an extension to how OpenSSL v1.0.1 stores and accesses per-connection error states.
• The Tanium Server /info page and /metrics now offer metrics about A/A inter-server communications.

Bug Fixes

• Solved an issue in handling of HTTP requests where the Tanium Server could crash during shutdown.
• Fixed a problem with the Tanium Server REST Import API which, for certain type of Sensors would return: HTTP 400: InvalidSensorScriptType.
• The server now hashes strings both case sensitively and case insensitively, and will accept the string if it matches either hash.
• The systemd start-up definition for the Tanium Module Server on Linux no longer lists remote-fs.target as a dependency, to avoid stalling the Module Server on stale and stalled remote filesystem mounts, as those used by the Connect module.
• Fixed a problem where an API call to UpdateObject on a user object would reset its group ID (and effective group ID) to zero, which was incorrect.
• Introduced a group of improvements aimed at increasing the efficiency of the Tanium Server while processing file download requests from Tanium Clients; specifically around ChunkRequests for chunks which are no longer hosted in the system.
• Fixed a problem in the update_all_server_packages stored procedure which would log column "issue_seeding_action" does not exist and fail to update the intended Package records.
• Fixed an issue with the /metrics presented for incoming Tanium protocol messages.
• Fixed a problem with the SQL query that updates Scheduled Action start times and could cause an Action to be scheduled but never actually fire.
• Fixed a problem where the Tanium Module Server might log error sending response: no error for certain types of failures.
• Updated the Tanium Server string hash resolution code to work again with the database schema layout of latest versions, and resolving a problem where every attempt at a hash resolution would log the message: Caught Exception in FlushAndSwap SQLStringHashes.
• Fixed an issue with flattened CSV format exports where the Tanium Server would fail to flatten a row had empty values in the last line of a cell/ band of results.
• Fixed a Tanium Server problem where it would not read existing recent Question results from disk on startup. This would cause Saved Questions asked in "Recent mode" to lose all previously known results every time the Tanium Server was restarted.
• Fixed an issue in the Tanium Server by which it would refresh its SOAPGroupCache even when it was unnecessary to do so, thus slowing down servicing of the Saved Questions page on the console.
• Fixed a problem in the Tanium Server API where a request for to rotate an API-token would actually generate two new tokens instead of one.
• Fixed an issue in setting implied RBAC v2 privileges over all Content Sets when the All Content Sets option was selected through the Tanium console.
• Improved the export process for CSV results so it can handle cases where a set of rows which can be flattened occasionally contain one or more rows which cannot be flattened because they contain unexpected multiple values on any of its columns.
• The Tanium Server improves the API to retrieve Saved Question results so the QuestionID offered in the result corresponds to the correct open, ongoing question being asked. This change avoids the Question is expired seen in the execution of some Connect jobs.
• The Tanium Module Server now includes a Host header entry in all its HTTP requests.
• Saved Question reissue intervals are now stored on a per-user basis, so the export mechanism has been modified to use the keep_seconds value for the user performing the export, and to set it for the user performing the import.
• Fixed the handling of Base-64 encoded fields in SAML interactions with ForgeRock OpenAM identity provider, which would cause an InvalidBase64 error during authentication.
• Fixed an issue in handling the column definitions when importing MULTI-NEW type Sensors, where these definitions would always be missing.
• Fixed a problem in importing MULTI-NEW type Sensors where its column definitions would be empty but would appear if the sensor import is done twice.
• Fixed a problem found with deleted Content Sets which would cause SQL errors during startup in UpdateModuleImpliedPrivilegesWorker that would repeatedly log: Subquery returned more than 1 value.
• Fixed a problem with the creation of Management Rights Groups by which a user with the Write Computer Group micro-admin privilege could not create new Computer Groups and receive a RBACInsufficientPrivilege error instead.
• Fixed an issue in the Package import API which would cause verification queries to be omitted in the imported package.
• Fixed a Tanium Server issue when importing Package meta-data which would cause a failure when two packages with the same name exist on a system.
• Fixed an issue in the management of result data where base64 encoding may not be performed when it should.
• The Tanium Server will now load all Global Settings early during startup to avoid any part of the system assigning a default value to a setting because its value is not found. Note that this implies that, the Tanium Server will no longer try to adjust settings with calculated values, like max_strings_total  and max_strings_total_mb , which you will have to remove them and then restart the Tanium Server if you want them to be updated after an increase in memory.

Known Issues and Workarounds

• N/A.

Additional Information

• This version of Tanium Server shipped with Common UI Components version 1.3.3.0150.

Product Documentation and Resources

• Tanium Product Documentation
• Tanium User Research
• Software Updates and Announcements Signup