IMPORTANT: This site is planned to be decommissioned in 2026. Visit the Tanium Resource Center for all Tanium release notes, user guides, and support information. To view release notes in the Resource Center, see Tanium Release Notes.
IMPORTANT: If you are using semi-annual releases for on premises, see the Release notes for 2024H1 semiannual release, Release notes for 2024H2 semiannual release, or Release notes for 2025H1 semiannual release on the Tanium Resource Center.
Effective October 15, 2024: On prem release notes on the Tanium Knowledge Base are frozen. For release notes related to 7.4 or 7.5 Server and Solutions, see the Monthly updates for Tanium Version 7.4 and 7.5 Server and Solutions on the Tanium Resource Center.

Release Notes Patch (Version 3.0)

From Tanium Knowledge Base
Jump to navigation Jump to search

Tanium Patch 3.0.57.0000

Release Date: 12 November 2020

Improvements

  • Prevent creation of duplicate Yum Repositories.
  • Expanded Maintenance Window details on the Maintenance Window index page now shows the next 5 instances.
  • Ensure all enforcements/deployments are loaded before displaying any on index pages
  • Changing drop-down filter menus to pill box selections where appropriate.
  • Blocking Maintenance Windows now correctly show "Never" as the date they will run instead of 1/1/1900.
  • Renamed the "Repeats" option to "Recurrence" and the "Repeat Frequency" option to "Frequency" in Maintenance Window create/edit form to improve clarity of the form.
  • Added the Version number when "Latest" version is used for Patch List deployments. Example: 3 (Latest).
  • Disabled the "More" button on the Patches grid if the logged in user has no rights to perform any of the actions it provides.

Resolved Issues

  • Fixed an issue that prevented editing Tanium Scan for Windows sync settings in a new Patch installation that did not use default configuration options.
  • Fixed an issue that prevented some pages from properly rendering in Safari browsers.
  • ‘Select All’ computer groups option removed from enforcement and deployment targeting interface.
  • Fixed an issue that allowed long repository snapshot names to extend and cover up other content on the page.
  • Fixed an issue that allowed Patch List grids to extend and cover up other content on the page.
  • Fixed an issue that allowed the Activity section on the Overview page to extend and cover up other content on the page.
  • Patch Coverage and Process running charts are now scoped to the Patch Action Group.

Tanium Patch 3.0.38.0000

Release Date: 2 November 2020

Important Notes

The release of Tanium Patch 3.0 ends support for Windows operating systems Windows Vista/Server 2008 (non-R2) and earlier. This includes Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008 (non-R2). Earlier versions of Tanium Patch will continue to function with older Windows versions; however, no new features will be added to Tanium Patch 2.x.

The release of Tanium Patch 3.0 uses Tanium Client Management and Tanium Endpoint Configuration (provided by Tanium Client Management) to deliver configuration and tools centrally. This new functionality combines all solution configurations into one distribution mechanism to greatly reduce the volume of actions and packages that was previously required to configure and deploy Tanium Patch. The previously used packages and actions for delivery of tools and configurations will no longer be present. For details of Tanium Client Management and Tanium Endpoint Configuration, see the Tanium Endpoint Configuration User Guide at https://docs.tanium.com/endpoint_configuration/endpoint_configuration/index.html.

Starting the Tanium Patch process on both Windows and Linux is still managed by packages and delivered by scheduled actions.

Support for Internet Explorer 11 has been deprecated as of Patch 3.0.

Upgrade Notes

Installation or upgrade of Interact, Trends, and Tanium Client Management must be completed prior to installing Patch 3.0 or any other module supporting the Endpoint Configuration management framework.

Action Required

  • Some customers might be running custom Patch Manifest Cleanup content, used to work around a previously known issue with cleaning up expired policies. Tanium Patch now correctly handles this issue, and the custom content will conflict with the built-in process, possibly leading to removal of maintenance windows or block lists that should remain.
  • Before upgrading to Patch 3.0, check if there are Scheduled Actions deploying either of the following packages:
    • Patch - Distribute Patch Manifest Cleanup
    • Patch - Run Patch Manifest Cleanup
  • If Scheduled Actions exist for either of those items, delete the Scheduled Actions, and also delete the corresponding packages.

New Features

  • This release includes a refreshed user experience, bringing more reporting, consistency, and configurability to the forefront.
  • This release includes a new endpoint configuration framework, replacing the actions and packages formerly used to configure endpoint tooling.
  • Recent results from offline endpoints are included in the workbench while enhancing user experience and application performance.
  • Workbench data is now scoped to the signed-in user or selected persona.
  • This release includes GPG support for user-configured YUM Repositories.
  • This release includes automatic clean-up of old or untargeted Enforcements (Scan Configurations, Block Lists, and Maintenance Windows). When an enforcement no longer matches the targeting criteria for the enforcement or the enforcement targeting is removed, the Endpoint Configuration service removes it.
  • The reliability of Tanium Scan for Windows has been improved by adding post-deployment scan retries.
  • The Patch Overview page includes configurable quick links to redirect users to regularly used locations.
  • This release includes three new Patch sensors:
    • Patch - Patch List Applicability Results
    • Patch - Block List Enforcement
    • Patch - Scan Configuration Enforcement
    • Patch - Maintenance Window Enforcement

Improvements

  • Improved business metrics and data collection on the Patch Overview page and the Trends gallery to support translation of patching data into measurable metrics the business can use to measure and improve upon patch processes.
    • Patch Coverage
    • Endpoint Compliance for Critical & Important Patches
    • Missing Critical/Important Patches per Year
    • Top Missing Critical/Important Patches
    • Mean Time to Patch
  • Blacklists have been renamed Block Lists.

Resolved Issues

  • Improves handling of certain scan errors during the patch deployment process and improves patch deployment success rates.
  • Reduces the likelihood of Deployment Status switching to “Not Applicable” when patches were successfully installed
  • Fixed a bug that caused Saturday and Sunday weekly recurring maintenance windows to be interpreted incorrectly on the endpoint.
  • Fixed a bug that caused the Patch process on Linux endpoints to throw an error when processing non-ascii characters in Patch enforcement names.
  • Fixed a bug that could cause Tanium Scans to fail with the error -2145123272 WU_E_PT_ENDPOINT_UNREACHABLE.
  • Fixed a bug that could cause the post install initialization to fail to run.

Security Updates

  • This release includes security updates. Details of the issues, including affected versions and mitigation information, can be obtained within Tanium's Support Portal or by contacting your TAM.

Prerequisites

  • Red Hat and CentOS endpoints require a minimum YUM version of yum-3.2.29-22.el6 to engage in Tanium Patch.

Known Issues and Workarounds

  • Maintenance windows configured to repeat monthly in the operator's browser time might display incorrect summary and upcoming maintenance windows.

Supported Tanium Platforms

Tanium Server 7.3.314.4250+, 7.4+