Release Notes Tanium Server (Version 7.5.4.1139)

Thank you for choosing Tanium. The following Release Notes document changes between releases of the Tanium Server.
This platform release includes the release of both a Windows and Linux Tanium Server.
The previous version can be found here: Release Notes (Version 7.5.3.1295)

Tanium Server for Windows and Linux v7.5.4.1139

General Availability Release Date: April 12, 2022.

Special Notes

• This version of Tanium Server shipped with: Console (Version 3.1.72.0000).
• Tanium discourages new installations of this software version on Windows 2012 and 2012-R2 due to its scheduled End-Of-Life on 2023-10-10.

Security Updates

• N/A.

New Features

• N/A.

Improvements

• The Tanium Server now exposes a /internal/monitoring/v1/dashboards route slated to return Grafana dashboard definitions compatible with the /metrics it offers.
• The Global Setting for max_console_idle_seconds will now be exposed in Cloud environments for customers who wish to extend their idle auto-logout period beyond the standard 1 hour.
• The Tanium Module Server will now enforce a minimum use of TLS v1.2.
• The Tanium Server API will now honor the X-Forwarded-For header when evaluating the IP address source of an incoming API Token request if the authenticate_api_token_with_x_forwarded_for_ip setting is in place.
• Tanium Server components will now write all of their configured trusted certificates into the file specified by TrustedCertPath, thus allowing other solutions to read and use them in their communications.

Bug Fixes

• Fixed a condition in handling the management of incoming Client connections without valid crypto materials and which would result in repeated log messages that read: unexpected 315 message without client certificate.
• Fixed a problem in the Tanium Server API where creating a Question and specifying a non-existing named group would issue the question against All Computers.
• Fixed an issue in the Tanium Server API when retrieving a Saved Action in an Action Group with the read_action_group privilege would deny access. This would cause issues in Action approval.
• Fixed a bug in the Tanium Server where attempting to create an Intentional Subnet definition with a CIDR value that was previously deleted, returning the error: subnet range with cidr_string already exists.
• Fixed an issue in the Tanium Server API where it was not returning an HTTP-503 response during startup and before the system was fully operational.
• Fixed a logging error in the Tanium Server http-access log where the size of responses to the /auth route had incorrect sizes.
• Fixed an issue in the Tanium Server upgrade where Packages which failed to download might populate a long error message in the packages table which could lead to an failure in database upgrade steps.
• Fixed an omission in the Tanium Server API by which creating an Action without an explicit expire_seconds value would fail to inherit and use this setting from the Package being referenced and use a value of zero instead.
• Fixed a bug in the Tanium Server where it could clean up old Packages which it should not and cause a PackageNotFound error when loading Action History on the Console.
• Fixed a bug which caused the Tanium Server where policy-based Actions would not fire when based on a counting Saved Question.
• Fixed an issue in the Tanium Server API where retrieving a Content Set Role wouldn't properly return its provided_on and provided_by fields.

Known Issues and Workarounds

• N/A.

Product Documentation and Resources

• Tanium Product Documentation
• Tanium User Research
• Software Updates and Announcements Signup