IMPORTANT: This site is planned to be decommissioned in 2026. Visit the Tanium Resource Center for all Tanium release notes, user guides, and support information. To view release notes in the Resource Center, see Tanium Release Notes.
IMPORTANT: If you are using semi-annual releases for on premises, see the Release notes for 2024H1 semiannual release, Release notes for 2024H2 semiannual release, or Release notes for 2025H1 semiannual release on the Tanium Resource Center.
Effective October 15, 2024: On prem release notes on the Tanium Knowledge Base are frozen. For release notes related to 7.4 or 7.5 Server and Solutions, see the Monthly updates for Tanium Version 7.4 and 7.5 Server and Solutions on the Tanium Resource Center.
Release Notes Patch (Version 2.2.0)
Thank you for choosing Tanium. This article documents changes between releases of Tanium Patch.
Tanium Patch 2.2.0.0669
Release Date: July 24, 2018
Feature Improvements
- Tanium Patch support for the Red Hat and CentOS operating systems is now available as a limited availability feature.
- Limited availability features can be enabled in the Settings section of the Tanium Patch Workbench.
- Enabling limited availability features should not be done without consulting with your Tanium Technical Account Manager.
- Enabling the Red Hat/CentOS Patch limited availability feature requires a minimum Tanium Platform version of 7.2.314.3235.
- Red Hat and CentOS endpoints require a minimum Tanium Client Version of 6.0.314.1554 to engage in Tanium Patch.
- Limited availability supported operating systems include: Red Hat 6, Red Hat 7, CentOS 6, CentOS 7
- Two new scan techniques are available to supported Linux Operating systems: Tanium Scan and Repo Scan.
- Repo Scan leverages existing customer infrastructure for scanning, downloading, and updating patches. The "Repo Scan" configuration commands the endpoints to scan against the configured YUM Repository defined in the endpoint configuration files. Global YUM Repository configuration files are located in the /etc/yum.repos.d/ directory for CentOS and RHEL systems.
- Tanium Scan leverages the Tanium Linear Chain Architecture for scanning, downloading, and updating patches. Based on target repositories defined in the Tanium workbench or defined locally in the endpoint's YUM configurations, Linux endpoints request patch files and metadata to download. Tanium acts as a proxy and pulls the requested metadata and patch files from external repositories, and distributes the files to endpoints via client API.
- Operator-controlled module sync.
- Tanium Patch users can now manually sync the Patch service module via the Tanium Patch Workbench and API.
- Actionable feedback on sync progress and completion is provided to the Patch operator in real-time.
- The Tanium Patch 'Patch - Patch List Applicability' sensor has been parameterized and enhanced to support 10x the number of unique applicable patches.
- The Tanium Patch Workbench has been enhanced with a new color palette.
- The Scan status "Waiting for scan interval" has been changed to "Waiting for next scan".
- Many minor enhancements to the Tanium Patch Workbench.
Bug Fixes
- Many bug fixes.
Known Issues and Workarounds
- This release is only available on Tanium platform versions 7.0 and higher.
- Tanium Client may fail to download Patches and experience higher than normal CPU usage if the ServerName value in the Tanium Server registry key has been changed from the default of 0.0.0.0.
- If you are using an air-gapped environment with an offline CAB file, you must upload the wsusscn2.cab and MS-CVEs.dat files to the Patch - External File References package. Optionally, use the WSUS scanning method.
- You might need to run a Windows Agent upgrade for reliable scanning and patch deployment on Windows XP and Windows XPx64.