Release Notes Tanium Client (Version 7.4.8.1042)

Thank you for choosing Tanium. The following Release Notes document changes between releases of the Tanium Client.
The previous Tanium Client versions can be found here: Release Notes (Version 7.4.7.1183)

Tanium Client 7.4.8.1042

Release Date: May 5, 2022.

Updated Date: June 28, 2022.

Special Notes

• This Tanium Client version now supports Debian v11 and Ubuntu v22.04.
• If using the Tanium Client setting StateProtectedFlag=1, see the important note below in Known Issues and Workarounds.
• Updated 6/28/2022: This Tanium Client version now support Amazon Linux 2 Graviton.

New Features

• The Tanium Client now offers a faster management for short-lived in-memory strings.
• The Tanium Client now significantly reduces the number of interactions with the Windows Registry subsystem by caching its configuration settings.
• The Tanium Client reduced its interactions with the Windows DPAPI subsystem when operating with StateProtectedFlag=1.
• The Tanium Client now supports Ubuntu v22.04.

Improvements

• Tanium components now offer safe access into logs, allowing multiple processes to use the same log file which is beneficial in the Tanium Client.
• The Tanium Client's reserved IP Addresses sensor will no longer report temporary IPv6 addresses (per RFC-3401) configured on an interface as part of privacy extensions. These addresses are considered transient and uninteresting and produce an unnecessarily large number of results from each endpoint.
• Tanium Components have dropped support for CBC -mode cipher suites: ECDHE-ECDSA-AES256-SHA384, ECDHE-RSA-AES256-SHA384, ECDHE-ECDSA-AES128-SHA256 and ECDHE-RSA-AES128-SHA256.
• The Tanium Client now offers a log named client-api which reports client API downloads activity, from requests to the handling of TC/Downloads/ files requested by product solutions.
• The Tanium Client will no longer close and re-open its log files with each batch of messages written, as an improvement in reducing disk activity on the endpoint.
• The Tanium Client has optimized its processing of Question definitions by reducing the number of times it has to copy their structures in memory.
• The Tanium Client will now cache information about existing Sensors to reduce the frequency and number of accesses it makes to its sensor.db.
• The Tanium Client now responds to a Global Setting SensorDBCacheSizeMB (with a default value of 10) that specifies the amount of memory to be used to cache contents from sensor.db and reduce disk and CPU utilization on repeated reads.
• The Tanium Client now uses memory-mapped I/O when verifying the integrity of SQLite databases as a way to reduce disk activity on the endpoint.

Bug Fixes

• The Tanium Client does additional cleaning of expired Question information which previously was only discarded during its reset process every few hours.

Known Issues and Workarounds

• When the Tanium Client setting StateProtectedFlag=1 is in use, the Tanium Client database has changed in a way that is incompatible with versions of Tanium Client Management older than 1.9.925.
  Workaround: If using this setting, you must upgrade to Tanium Client Management 1.9.925 or higher before upgrading to Tanium Client 7.4.8.1042 or higher. Tanium Client v7.4.8.1054 provides a fix for this issue.
• The Tanium Client log rotation may fail when running with high values of LogVerbosityLevel, resulting in unexpectedly large TC/Logs/ files.
  Workaround: Tanium Client v7.4.8.1054 provides a fix for this issue.

Product Documentation and Resources

• Tanium Product Documentation
• Tanium User Research
• Software Updates and Announcements Signup