Release Notes Tanium Server and Tanium Client (Version 7.6.1.6428)

Thank you for choosing Tanium. The following Release Notes document changes between releases of the Tanium Server and Tanium Client.
This platform release includes the release of both a Windows and Linux Tanium Server as well as the Tanium Client for all supported platforms.
The previous version can be found here: Release Notes (Version 7.6.1.6412)

Tanium Server for Windows and Linux and Tanium Clients for all platforms v7.6.1.6428

• Tanium Cloud availability date: November 3, 2023.
• On-premises availability date: N/A.

Special Notes

• This version of Tanium Server shipped with: Console (Version 3.6.37.0000).
• Tanium discourages new installations of this software version on Windows 2012 and 2012-R2 due to its scheduled End-Of-Life on 2023-10-10.

Security Updates

• This release includes security updates. Details of the issues, including affected versions and mitigation information, can be obtained within Tanium's Support Portal or by contacting your TAM.

New Features

N/A.

Improvements

• Implements limits for the new Tanium Server question result and string hash retry caches to keep them at a reasonable size.
• Ensures that URL to chunk mappings known to the Tanium Client are not just saved periodically but also on shutdown to avoid any loss of data.
• The Tanium Client now reduces ReflectionConnectMaxRetryInSeconds down to sixty seconds instead of five minutes to make its back-off interval shorter, and also resets its back-off interval after achieving a connection to a server, even if the connection does not close cleanly. This allows endpoints to be more resilient in their attempts to secure a server connection under adverse network conditions.

Bug Fixes

• This change separates the processing of active-active Tanium Server and Zone Server message streams, as well as supporting concurrent client streams over the same connection. This solves a number of communications issues observed characterized by the logged errors: "unexpected exception: Can't queue callback that is connected somewhere else", "unexpected exception: Source is already connected to another callback" and "assertion 'm_downloadThrottle' failed" and will also resolve "cdn-config: ignoring request because too many are pending".
• Forces the Tanium Server to re-read and interpret a sensor's string files when the case-insensitive flag in the sensor definition is changed. This is to avoid the [RCU] errors that this change can produce.
• Fixes an issue in the way the Tanium Client services sensor evaluation requests from the client extension framework, where it would return a "Sensor not found" failure during sensor synchronization operations. The Tanium Client will now enqueue these requests until the synchronization is completed.
• Fixes an error condition in the state handling of outgoing HTTP connections from the Tanium Client which would produce the log error: assertion 'm_state == kStateEstablished' failed.
• Prevents the Tanium Server from initiating new CPMS communications work when its queues are already too busy, which would result in a number of errors and failed assertions.
• The Tanium Server will now sometimes re-read and re-interpret the contents of sensor string files. This change ensures that reinterpretation is immediately serialized back to disk.

Known Issues and Workarounds

• On upgrade from v7.4 clients v7.6.1 client releases may display an incompatibility with older OpenSSL v1 dependent client extensions. Tanium strongly encourages installation and upgrades to the latest release of v7.6.2+ clients, starting with 7.6.2.1204.

Product Documentation and Resources

• Tanium Product Documentation
• Tanium User Research
• Software Updates and Announcements Signup