IMPORTANT: This site is planned to be decommissioned in 2026. Visit the Tanium Resource Center for all Tanium release notes, user guides, and support information. To view release notes in the Resource Center, see Tanium Release Notes.
IMPORTANT: If you are using semi-annual releases for on premises, see the Release notes for 2024H1 semiannual release, Release notes for 2024H2 semiannual release, or Release notes for 2025H1 semiannual release on the Tanium Resource Center.
Effective October 15, 2024: On prem release notes on the Tanium Knowledge Base are frozen. For release notes related to 7.4 or 7.5 Server and Solutions, see the Monthly updates for Tanium Version 7.4 and 7.5 Server and Solutions on the Tanium Resource Center.
Release Notes Patch (Version 3.6)
Tanium Patch 3.6.50.0000
Release Date: 16 November 2021
Resolved Issues
- Fixed an issue that prevented CVE, Release Date, and Advisory data from being added to macOS Big Sur and Monterey scan results.
- Fixed an issue that caused Mac scan results to return [no results] instead of "No Applicable Patches".
- Fixed an issue that prevented download status updates for Mac patches from being written to the Patch log until downloading completed.
- Fixed an issue that caused download failures for SLES 12 patches with the error ZYPPER_EXIT_ERR_ZYPP.
- Fixed an issue that caused a 500 error to appear in the UI when the Synchronize Now button was pushed for Tanium Scan.
- Fixed an issue that was causing the "Job failed: Cleanup deployment targeting groups" warning to appear in the Patch Workbench in some environments.
- Added Read Filter Group privileges for the Patch Content Set and Default Filter Group content sets to Patch Roles.
- Fixed an issue that allowed administrators to view the names of filter groups they should not be allowed to.
- Fixed an issue that caused some valid patch metadata to be excluded when Tanium Scan was synced against a WSUS server with many patch revisions.
Known Issues
- Because of MDM requirements for patching that were introduced in macOS Monterey 12.1, Tanium Patch does not support macOS Monterey 12.1 or later.
- macOS endpoints that use the Apple silicon (M1) chip will experience a reboot loop if you deploy an OS patch that requires a reboot.
Security Update
- This release includes security updates. Details of the issue, including affected versions and mitigation information, can be obtained within Tanium's Support Portal or by contacting your TAM.
Tanium Patch 3.6.34.0000
Release Date: 02 November 2021
New Features
- Patch support added for macOS 10.14 and later.
- This adds macOS support for the components that Patch customers are accustomed to, including scanning, deployments, deployment templates, patch lists, block lists, and maintenance windows.
- Note 1: Existing Patch customers will need to enable the new Mac functionality using the Settings > Operating Systems > macOS check box.
- Note 2: Existing Patch customers may need to expand the “Patch” and “Tanium End-User Notifications” Action Groups to include the newly supported operating systems.
- End-User Notifications support added for macOS devices in Patch.
Security Update
- This release includes security updates. Details of the issue, including affected versions and mitigation information, can be obtained within Tanium's Support Portal or by contacting your TAM.
Resolved Issues
- Fixed an issue that could prevent Limiting Groups from being required when adding Targeting Criteria to an existing deployment. Note that this change enforces this same validation on the API side that should have always existed.
- Fixed the format of dates in patch csv exports from Patch Lists, Block Lists, and Deployments. The format is YYYY/MM/DD and can easily be sorted as a date or text.
- Fixed an issue in the CVE filter for all patch grids (Patches, Patch Lists, Blocks lists, Deployment Preview) that prevented filtering by a single CVE at a time
Known Issues
- Because of MDM requirements for patching that were introduced in macOS Monterey 12.1, Tanium Patch does not support macOS Monterey 12.1 or later.
- macOS endpoints that use the Apple silicon (M1) chip will experience a reboot loop if you deploy an OS patch that requires a reboot.
- End-User notifications may have significant delays or not appear at all on macOS 10.15 (Catalina). This will be addressed soon with an End-User Notifications update.
- Some Mac patches include a release date of “Not Available”, especially with macOS 11.x and 12.x (Big Sur and Monterey). Those patches will not be included in any Patch Lists or Block Lists that use Release Date as criteria. For example, a patch with Release Date of “Not Available” would NOT match the “Release Date greater than 10/01/2021” criteria. By the same token, it would not match the same sort of query for any operator on the Release Date field. A future Patch upgrade will add release dates for most Mac patches, thus allowing the Release Date comparison to work.
Prerequisites
- Red Hat and CentOS endpoints require a minimum YUM version of yum-3.2.29-22.el6 to engage in Tanium Patch.
- Windows endpoints require a minimum operating system version of Windows 7 SP1 or Windows Server 2008 R2 SP1.
- macOS endpoints require a minimum operating system version of 10.14.
Supported Tanium Platforms
Tanium Server 7.3.314.4250+, 7.4+