Release Notes Patch (Version 2.6)

Tanium Patch 2.6.16.0001

Release Date: 14 July 2020

Bug Fixes

• Fixed a bug that could cause slow group fetching on 7.4 Tanium Server versions to degrade Patch service and workbench performance.
• Fixed a bug that could cause jobs to get stuck in a 'running' state.
• Fixed a bug that caused 'Snapshot yum repository' warning banners to display after the banner was dismissed.

Prerequisites

• Red Hat and CentOS endpoints require a minimum YUM version of yum-3.2.29-22.el6 to engage in Tanium Patch.

Known Issues and Workarounds

• If the ServerName value in the Tanium Server registry key has been changed from the default of 0.0.0.0, the Tanium Client might fail to download patches and experience higher than normal CPU usage.
• If you are using Windows XP or Windows XP x64, you might need to run a Windows agent upgrade for reliable scanning and patch deployment.
• Enabling the Linux Patch feature requires a minimum Tanium Platform version of 7.2.314.3235.
• Linux endpoints require a minimum Tanium Client version of 7.2.314.3476 to engage in Tanium Patch.
• Leading and trailing whitespace is stripped from patch list and blacklist rule expressions on save.
• Creating a patch list or blacklist with an empty rule expression will cause initialization to fail.
• When configuring Computer Groups for Visibility, a known issue can prevent all available computer groups from being listed. The workaround is to use grid filtering to search for computer groups.
• Maintenance windows configured to repeat monthly in the operator's browser time might display incorrect summary and upcoming maintenance windows.
• Patch tools required for Windows Tanium Scan will fail to install on Tanium Client version 6.0.x.
• Planned end-of-support for Windows versions in Tanium Patch: Tanium Patch version 3 is planned for release in 2020. Version 3.x will not support Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008 (non-R2). Earlier versions of Tanium Patch will continue to function with older Windows versions; however, when version 3 is available, no new releases of Tanium Patch 2.x will be made.

Supported Tanium Platforms

Tanium Server 7.2, 7.3, 7.4

Tanium Patch 2.6.15.0000

Release Date: 7 July 2020

Bug Fixes

• Fixed a bug that caused scans to fail on Windows 10 (2004) endpoints.
  • Add the <Tanium Client>\Patch\tools\TaniumUpdateSearcher.exe to your security exclusions.

Prerequisites

• Red Hat and CentOS endpoints require a minimum YUM version of yum-3.2.29-22.el6 to engage in Tanium Patch.

Known Issues and Workarounds

• If the ServerName value in the Tanium Server registry key has been changed from the default of 0.0.0.0, the Tanium Client might fail to download patches and experience higher than normal CPU usage.
• If you are using Windows XP or Windows XP x64, you might need to run a Windows agent upgrade for reliable scanning and patch deployment.
• Enabling the Linux Patch feature requires a minimum Tanium Platform version of 7.2.314.3235.
• Linux endpoints require a minimum Tanium Client version of 7.2.314.3476 to engage in Tanium Patch.
• Leading and trailing whitespace is stripped from patch list and blacklist rule expressions on save.
• Creating a patch list or blacklist with an empty rule expression will cause initialization to fail.
• When configuring Computer Groups for Visibility, a known issue can prevent all available computer groups from being listed. The workaround is to use grid filtering to search for computer groups.
• Maintenance windows configured to repeat monthly in the operator's browser time might display incorrect summary and upcoming maintenance windows.
• Patch tools required for Windows Tanium Scan will fail to install on Tanium Client version 6.0.x.
• Planned end-of-support for Windows versions in Tanium Patch: Tanium Patch version 3 is planned for release in 2020. Version 3.x will not support Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008 (non-R2). Earlier versions of Tanium Patch will continue to function with older Windows versions; however, when version 3 is available, no new releases of Tanium Patch 2.x will be made.

Supported Tanium Platforms

Tanium Server 7.2, 7.3, 7.4

Tanium Patch 2.6.14.0000

Release Date: 16 June 2020

Bug Fixes

• Fixed a bug that could cause Tanium Scan synchronization jobs to fail in environments where the Tanium Module Server is configured to use a proxy.
• Fixed a bug that could cause whitelist URL synchronization jobs to fail.

Prerequisites

• Red Hat and CentOS endpoints require a minimum YUM version of yum-3.2.29-22.el6 to engage in Tanium Patch.

Known Issues and Workarounds

• If the ServerName value in the Tanium Server registry key has been changed from the default of 0.0.0.0, the Tanium Client might fail to download patches and experience higher than normal CPU usage.
• If you are using Windows XP or Windows XP x64, you might need to run a Windows agent upgrade for reliable scanning and patch deployment.
• Enabling the Linux Patch feature requires a minimum Tanium Platform version of 7.2.314.3235.
• Linux endpoints require a minimum Tanium Client version of 7.2.314.3476 to engage in Tanium Patch.
• Leading and trailing whitespace is stripped from patch list and blacklist rule expressions on save.
• Creating a patch list or blacklist with an empty rule expression will cause initialization to fail.
• When configuring Computer Groups for Visibility, a known issue can prevent all available computer groups from being listed. The workaround is to use grid filtering to search for computer groups.
• Maintenance windows configured to repeat monthly in the operator's browser time might display incorrect summary and upcoming maintenance windows.
• Patch tools required for Windows Tanium Scan will fail to install on Tanium Client version 6.0.x.
• Planned end-of-support for Windows versions in Tanium Patch: Tanium Patch version 3 is planned for release in 2020. Version 3.x will not support Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008 (non-R2). Earlier versions of Tanium Patch will continue to function with older Windows versions; however, when version 3 is available, no new releases of Tanium Patch 2.x will be made.

Security Update

This release includes security updates. For details, including affected versions and mitigation information, see the Tanium Support Portal, or contact your TAM.

Supported Tanium Platforms

Tanium Server 7.2, 7.3, 7.4

Tanium Patch 2.6.10.0000

Release Date: 19 May 2020

Feature Improvements

• Improvements were made to the default configuration (available in Tanium Core Platform 7.4.2 or later):
  • Default configuration settings were enhanced to improve responsiveness. The time between module import to having usable patch scan results is now shorter.
  • A new [Patch Baseline Deployment] - Windows default patch list specifically for deploying Windows patches is now created.
  • A new [Patch Tuesday] - Windows default maintenance window that targets 'Patch Tuesday' is now created.
  • Default deployment templates were updated with current Patch icons.
• Tanium Scan Source locations for local WSUS servers now allow HTTP URLs in addition to HTTPS URLS.
• Failed jobs are now re-tried automatically on Patch service startup.
• The Deployments detail page was improved. 'Patch Lists', 'Patches' and 'Deployment Targets' at the top of the page now link to those sections in the page.
• The 'Patch - Deployment Results' sensor now includes the following columns: Severity, Release Date, KB Articles

Bug Fixes

• Fixed a bug that caused the home page ordering to be incorrect.
• The Re-initiatize button on the deployments detail page was fixed.

Prerequisites

• Red Hat and CentOS endpoints require a minimum YUM version of yum-3.2.29-22.el6 to engage in Tanium Patch.

Known Issues and Workarounds

• If the ServerName value in the Tanium Server registry key has been changed from the default of 0.0.0.0, the Tanium Client might fail to download patches and experience higher than normal CPU usage.
• If you are using Windows XP or Windows XP x64, you might need to run a Windows agent upgrade for reliable scanning and patch deployment.
• Enabling the Linux Patch feature requires a minimum Tanium Platform version of 7.2.314.3235.
• Linux endpoints require a minimum Tanium Client version of 7.2.314.3476 to engage in Tanium Patch.
• Leading and trailing whitespace is stripped from patch list and blacklist rule expressions on save.
• Creating a patch list or blacklist with an empty rule expression will cause initialization to fail.
• When configuring Computer Groups for Visibility, a known issue can prevent all available computer groups from being listed. The workaround is to use grid filtering to search for computer groups.
• Maintenance windows configured to repeat monthly in the operator's browser time might display incorrect summary and upcoming maintenance windows.
• Patch tools required for Windows Tanium Scan will fail to install on Tanium Client version 6.0.x.
• Planned end-of-support for Windows versions in Tanium Patch: Tanium Patch version 3 is planned for release in 2020. Version 3.x will not support Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008 (non-R2). Earlier versions of Tanium Patch will continue to function with older Windows versions; however, when version 3 is available, no new releases of Tanium Patch 2.x will be made.

Supported Tanium Platforms

Tanium Server 7.2, 7.3, 7.4

Support for Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008 (non-R2) in Tanium Patch will end with Tanium Patch version 3.

Tanium Patch 2.6.7.0001

Release Date: 12 May 2020

Feature Improvements

• The operator can now configure a default Deployment Template which will be automatically applied to new deployments.
• When creating Deployments, the deployment name is now auto populated.
• The 'All Computers' computer group is now presented at the top of computer group dropdowns.
• Updated the Maintenance Window preview to clarify that it only shows the next 5 occurrences.
• Improvements have been made to the default configuration (available in Tanium Core Platform 7.4.2 or later):
  • Failed jobs are now re-tried automatically after default configuration is applied.
  • Default Scan Configurations are now created and enforced to Oracle and Amazon Linux endpoints.
  • Default Maintenance Windows and Blacklists are now created for Oracle and Amazon Linux operating systems.
  • Default Deployment templates are created for all supported operating systems.
  • The configuration section of the Patch Home Page will be hidden after default configuration is applied.
  • Optimized Global Settings values for 'ClientCacheLimitInMB' and 'HotCachePercentage' are now applied as part of default configuration.

Bug Fixes

• Fixed two bugs that could cause deployments to fail on Windows endpoints when using Tanium Scan.
  • Post deployment scans on Windows endpoints could fail with "error communicating with the endpoint".
  • Patches could be missing URLs causing deployments to fail.
• Fixed a bug that caused scan priority re-ordering to fail.
• Fixed a bug that caused the Mean Time to Patch board in Trends to be missing.
  • Fixed a bug that could cause persistent Patch Action Group targeting warnings on the Patch Home Page.

Prerequisites

• Red Hat and CentOS endpoints require a minimum YUM version of yum-3.2.29-22.el6 to engage in Tanium Patch.

Known Issues and Workarounds

• If the ServerName value in the Tanium Server registry key has been changed from the default of 0.0.0.0, the Tanium Client might fail to download patches and experience higher than normal CPU usage.
• If you are using Windows XP or Windows XP x64, you might need to run a Windows agent upgrade for reliable scanning and patch deployment.
• Enabling the Linux Patch feature requires a minimum Tanium Platform version of 7.2.314.3235.
• Linux endpoints require a minimum Tanium Client version of 7.2.314.3476 to engage in Tanium Patch.
• Leading and trailing whitespace is stripped from patch list and blacklist rule expressions on save.
• Creating a patch list or blacklist with an empty rule expression will cause initialization to fail.
• When configuring Computer Groups for Visibility, a known issue can prevent all available computer groups from being listed. The workaround is to use grid filtering to search for computer groups.
• Maintenance windows configured to repeat monthly in the operator's browser time might display incorrect summary and upcoming maintenance windows.
• Patch tools required for Windows Tanium Scan will fail to install on Tanium Client version 6.0.x.
• Planned end-of-support for Windows versions in Tanium Patch: Tanium Patch version 3 is planned for release in 2020. Version 3.x will not support Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008 (non-R2). Earlier versions of Tanium Patch will continue to function with older Windows versions; however, when version 3 is available, no new releases of Tanium Patch 2.x will be made.

Supported Tanium Platforms

Tanium Server 7.2, 7.3, 7.4

Support for Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008 (non-R2) in Tanium Patch will end with Tanium Patch version 3.

Tanium Patch 2.6.0.0051

Release Date: 21 April 2020

Feature Improvements

• To better support remote endpoints, Windows scan configurations now enable downloading patch installer files directly from the internet.
  • This feature can be enabled for isolated endpoints on specified VPN networks or connected to specified Zone Servers.
  • A new sensor, "Patch - Direct Download Statuses", returns data on pending and complete downloads.
  • Please consult with your TAM before enabling direct downloads for Windows scan configurations.
• Adds managed WSUS compatibility support for Tanium Scan for Windows.
  • When enabled, this feature supports compatible usage of the Windows Update Agent for endpoints that also perform patch scanning with other tools that use a WSUS infrastructure.
  • Random scan delay and distribute over time should always be used when this option is selected due to communication between endpoints and their configured WSUS server.
  • This is enabled as a configuration option offered on Windows scan configurations using the Tanium Scan scan technique.
• Adds an enhancement to better track the download of the offline CAB file in the workbench.
• Adds an enhancement to improve the collection of mean time to patch data for Trends.

Bug Fixes

• Fixes an issue that caused mean time to patch data to be tracked improperly for ongoing deployments.

Prerequisites

• Red Hat and CentOS endpoints require a minimum YUM version of yum-3.2.29-22.el6 to engage in Tanium Patch.

Known Issues and Workarounds

• If the ServerName value in the Tanium Server registry key has been changed from the default of 0.0.0.0, the Tanium Client might fail to download patches and experience higher than normal CPU usage.
• If you are using Windows XP or Windows XP x64, you might need to run a Windows agent upgrade for reliable scanning and patch deployment.
• Enabling the Linux Patch feature requires a minimum Tanium Platform version of 7.2.314.3235.
• Linux endpoints require a minimum Tanium Client version of 7.2.314.3476 to engage in Tanium Patch.
• Leading and trailing whitespace is stripped from patch list and blacklist rule expressions on save.
• Creating a patch list or blacklist with an empty rule expression will cause initialization to fail.
• When configuring Computer Groups for Visibility, a known issue can prevent all available computer groups from being listed. The workaround is to use grid filtering to search for computer groups.
• Maintenance windows configured to repeat monthly in the operator's browser time might display incorrect summary and upcoming maintenance windows.
• Patch tools required for Windows Tanium Scan will fail to install on Tanium Client version 6.0.x.
• Planned end-of-support for Windows versions in Tanium Patch: Tanium Patch version 3 is planned for release in 2020. Version 3.x will not support Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008 (non-R2). Earlier versions of Tanium Patch will continue to function with older Windows versions; however, when version 3 is available, no new releases of Tanium Patch 2.x will be made.

Supported Tanium Platforms

Tanium Server 7.2, 7.3, 7.4

Support for Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008 (non-R2) in Tanium Patch will end with Tanium Patch version 3.