Release Notes Tanium Server and Tanium Client (Version 7.6.1.6393)

Thank you for choosing Tanium. The following Release Notes document changes between releases of the Tanium Server and Tanium Client.
This platform release includes the release of both a Windows and Linux Tanium Server as well as the Tanium Client for all supported platforms.
The previous version can be found here: Release Notes (Version 7.6.1.6334)

Tanium Server for Windows and Linux and Tanium Clients for all platforms v7.6.1.6393

• Tanium Cloud availability date: October 26, 2023.
• On-premises availability date: N/A.

Special Notes

• This version of Tanium Server shipped with: Console (Version 3.6.37.0000).
• Tanium discourages new installations of this software version on Windows 2012 and 2012-R2 given its End-Of-Life on 2023-10-10.

Security Updates

• N/A.

New Features

• Implements the EnableCDNDownloads Tanium Client setting to enable CPMS-hosted downloads when in conjunction with the appropriate Tanium Server support and configuration.
• Enables Control Flow Guard (CFG) on Windows binaries builds.
• Implements chunk cache use metrics in the Tanium Zone Server.
• Implements a metric to track non-handled exceptions in the communication in Tanium Servers and Zone Servers.

Improvements

• The Tanium Client will now uses a SHA-256 hash for the identification of contents in direct download requests.
• Ensures that plain-text communications between the Tanium Server and modules is only possible when running in a TRUSTED_MASH_FLAG=1 configuration.
• The Tanium Client will now compress large question result reports as controlled by its EnableReportCompression and ReportCompressionThreshold which defaults to 1,024 bytes.
• Reduces log spam in the Tanium Server by issuing "Failed to build question" and "Failed to build action" only once.
• Makes the TaniumExtractor tool more resilient to errors as to allow it to continue processing whenever possible.
• Improves the performance of the Tanium Server in computing cache sizes reported in its /metrics route.
• Improves the Tanium Server performance in calculating snapshots of new information transmitted out to Zone Server Hubs.
• Adds support for incoming HTTP2 connections initiated with prior knowledge and an correct connection preface.
• Changes the logging level for HTTP2 closed pipe log messages to a higher level, since they are not really error conditions.
• Platform components now ship with Curl v8.4.0.
• The Tanium Client offers better handling of long timeouts when communicating with its client extension components, which could happen during endpoint sleep cycles.
• Improves the error handling and resilience of the communications between the Tanium Client and the client extension framework when receiving oversized messages through. their communications channel.
• Improves the http-access logging of data retrieval SOAP requests to the Tanium Server by logging the type and ID in the request, like: GetResultInfo:question/501.
• The Tanium Client will now send verbatim sensor result values if their length is shorter than that of the hash that would be used to represent the value itself.

Bug Fixes

• Fixes an incorrect parsing of incoming SAML identity provider data in the Tanium Server which would trigger the error "SAML authentication failed: Invalid namespace prefix 'xmlns:xsi' for attribute" when InclusiveNamespaces were used.
• Fixes an issue in the Tanium Server which would prevent clients from downloading ECF package files from CPMS.
• Fixes a problem in the Tanium Server by which it would not issue TLS session tickets to connected clients.
• Fixes an incorrect count of endpoints presented by the Tanium Server when deploying an action to machines with the same computer name.
• Fixes a problem in the Tanium Server integration with SCIM that could result in the error message: SQLException: duplicate key value violates unique constraint groups_name_hash_normal_group_unique_index.
• Fixes a condition where the very first client connections to a Tanium server would operate without their configured throttles. Now the Tanium servers will refuse incoming client connections during startup until all throttle configurations are loaded and operational.
• Fixes a problem in the Tanium Server serialization of its newly designed result cache.
• Fixes an issue by which [RCU] errors would not be included and shown for counting questions issued by the Tanium Server.
• Fixes an issue with the Tanium Client where it may log "assertion '!m_resetRequired && !m_challengeRequired' failed" and then stop right after completing a server challenge.
• Fixes a timing condition in the Tanium Client which would make it wait for longer than necessary when stopping the CX execution framework, giving the impression that they system was idling unnecessarily.
• Fixes an error in the instrumentation of the Tanium Client which would prevent the client from starting with the message: Metric result_retries_received already registered.

Known Issues and Workarounds

• The Tanium Client will fail to parse a PAC proxy file referenced by ProxyAutoConfigAddress when more than one proxy server is defined, logging "Failed to parse proxy name. Too many colons" at LogVerbosityLevel=41.
  Workaround: None. A fix for this issue is will be released with a new version of the Tanium Client post-v7.6.1.6432.
• On upgrade from v7.4 clients v7.6.1 client releases may display an incompatibility with older OpenSSL v1 dependent client extensions. Tanium strongly encourages installation and upgrades to the latest release of v7.6.2+ clients, starting with 7.6.2.1204.

Product Documentation and Resources

• Tanium Product Documentation
• Tanium User Research
• Software Updates and Announcements Signup