Release Notes Patch (Version 3.4)

Tanium Patch 3.4.240.0000

Release Date: 21 September 2021

Security Update

This release includes a security update. Details of the issue, including affected versions, and mitigation information can be obtained within Tanium's Support Portal, or by contacting your TAM.

Prerequisites

• Red Hat and CentOS endpoints require a minimum YUM version of yum-3.2.29-22.el6 to engage in Tanium Patch.
• Windows endpoints require a minimum operating system version of Windows 7 SP1 or Windows Server 2008 R2 SP1.

Tanium Patch 3.4.239.0000

Release Date: 24 August 2021

Improvements

• Added a time filter to the Inactive Deployments page to reduce noise and service load when many inactive deployments exist.
• Improved speed and responsiveness of the Deployments index that appears in both the Patch Overview and Deployments pages.
• Back-end supportability improvements.

Resolved Issues

• Fixed an issue that caused a new Deployment status message to write errors in the Patch service logs.
• Fixed an issue that prevented some limited users from viewing deployments they should have been able to see.
• Fixed an issue that caused some deployments to be displayed multiple times in the Patch workbench for limited users.
• Fixed an issue that could cause some Linux scans to fail if the cache became outdated, instead of updating the cache and then scanning.
• Fixed an issue that could cause Red Hat 8, CentOS 8, Oracle 8, and SUSE systems to fail to install patches under some circumstances.
• Fixed a UI only issue that could result in the patch list preview not showing recent patches when using greater than/less than release date criteria.
• Fixed one issue that could cause Windows endpoints using Tanium Scan to receive the Windows Update error "-2145123272 WU_E_PT_ENDPOINT_UNREACHABLE" during Patch scans in rare circumstances.

Prerequisites

• Red Hat and CentOS endpoints require a minimum YUM version of yum-3.2.29-22.el6 to engage in Tanium Patch.
• Windows endpoints require a minimum operating system version of Windows 7 SP1 or Windows Server 2008 R2 SP1.

Supported Tanium Platforms

Tanium Server 7.3.314.4250+, 7.4+

Tanium Patch 3.4.222.0000

Release Date: 13 July 2021

Improvements

• Significant improvements made in workbench performance in large environments with many patch configurations and many concurrent users.
• Added the ability to export lists of patches from the Patch Lists, Block Lists, and Deployments patch grids.
• Added the ability to import and export Linux repositories to improve the initial configuration experience as well as the experience in managing multiple environments such as test lab and production.
• Added the Advanced Settings interface to the Settings page.
• Changed the wait time between scan retries from 10 minutes to 3 minutes. There was little value realized in waiting 10 minutes.
• Changed the type of the "Size in Bytes" columns in Patch sensors from string to numeric characters to allow proper sorting in Interact.
• Added a scan error to indicate when the LibZypp plugin is installed and Tanium Scan is used on Linux systems. This configuration is unsupported.
• Added new sensors: Patch - Maintenance Windows, Patch - Block Lists, and Patch - Scan Configurations.
• Removed old sensors: Patch - Maintenance Window Enforcement, Patch - Block List Enforcement, Patch - Scan Configuration Enforcement.
• Improved filter accuracy for drill-down questions from deployments and enforcements.
• Improved filtering in Patch Overview charts.
• Improved the speed at which new CAB files are loaded into the Patch workbench.
• Improved efficiency of the Deployment Preview pane.
• Improved efficiency of gathering enforcement data.
• Improved the efficiency of gathering enforcement status (maintenance windows, block lists, and scan configurations) in the Patch workbench.
• Improved the reliability of Tanium Scan for Windows synchronization.
• Improved workbench efficiency by eliminating job polling.
• Added miscellaneous user interface improvements.
• The Patch Coverage chart now uses the Patch Coverage Details sensor, which provides additional insight into any systems that need attention.
• Removed obsolete log messages.

Resolved Issues

• Removed unneeded messages flooding the Patch service logs.
• Fixed an issue that caused Zypper to execute more often than required on SUSE endpoints.
• Fixed a rare race condition that could lead to the Tanium Scan for Windows sync service not starting after a new Patch install.
• Fixed an issue that could generate 504 errors while Tanium Scan for Windows was syncing.
• Fixed an issue that caused dismissed warnings to re-appear after every service restart. Note: They will appear once more after this upgrade, but once dismissed, they should not appear again.
• Fixed an issue that caused some patch download URLs to be retrieved from the endpoint's configured WSUS server instead of a URL usable by Tanium.
• Fixed an issue that caused Tanium Scan for Windows product/classification settings to not be configurable after changing the scan source.
• Fixed an issue that caused the preview section to NOT get updated when a condition was removed from a patch list.
• Fixed an issue that could cause display errors when opening a patch list, block list, or deployment preview.
• Fixed an issue that could cause scan windows to display the wrong start time in the user interface.
• Fixed an issue that could cause some Patch configurations to fail if custom sensors used in targeting lacked code for supported operating systems.
• Fixed an issue that could cause some RHEL8 (DNF) based installations to fail because all required files were not downloaded.
• Fixed an issue that could cause some SUSE scans to fail because of missing files.
• Fixed an issue that could cause the deployment creation page to hang if the platform was selected too quickly after page load.
• Fixed an issue that could cause WU_E_PT_SOAPCLIENT_SOAPFAULT scan errors.
• Fixed an issue that could generate 504 errors when loading patch lists.
• Fixed an issue that could lead to constant warnings about rejected changes when Approval is enabled.
• Fixed an issue that generated incorrect URLs when attempting to create a SLES repo snapshot.
• Fixed an issue that prevented changes to deployment templates from being saved.
• Fixed an issue that prevented Saturday/Sunday maintenance windows from processing correctly when defining a time zone, rather than endpoint local time.
• Fixed an issue in the formatting of CVE data from Linux systems.
• Fixed an issue that prevented some RHEL 8 systems from reporting all missing patches.
• Fixed an issue that prevented some users from drilling down from Patch charts to endpoint data.
• Fixed an issue that prevented syncing Tanium Scan for Windows from a WSUS server source.
• Fixed an issue with patch downloads caused by localhost not resolving properly.
• Fixed an issue that could cause Red Hat 8, CentOS 8, Oracle 8, and SUSE systems to fail to install patches under some circumstances.
• Fixed a UI only issue that could result in the patch list preview not showing recent patches when using greater than/less than release date criteria.

Prerequisites

• Red Hat and CentOS endpoints require a minimum YUM version of yum-3.2.29-22.el6 to engage in Tanium Patch.
• Windows endpoints require a minimum operating system version of Windows 7 SP1 or Windows Server 2008 R2 SP1.

Supported Tanium Platforms

Tanium Server 7.3.314.4250+, 7.4+