Fixed an issue where scheduled SaaS application usage reports were generated incorrectly, and the login page was displayed instead of the report content.

A fix was made to address CVE-2025-0111.

A fix was made to address CVE-2025-0108.

A fix was made to address CVE-2025-0109.

Fixed an issue where TLS 1.3 decryption failed with a bad record MAC error when the firewall was configured to decrypt and inspect TLS traffic.

Fixed an issue where some TLS connections were not handled correctly, which led to instability in the dataplane.

Fixed an issue where Panorama did not display logs from firewalls after upgrading to PAN-OS 10.2.11 on devices due to Elasticsearch (ES) getting restarted continuously.

Fixed an issue where traffic was dropped when the accumulation proxy was enabled and header insertion modified packets.

Fixed an issue where Receive Time and Time Generated were not visible as attributes in the Filter Builder for system logs and URL filtering logs.

Fixed an issue on hardware firewalls where, when SSL decryption was enabled and Client Hello messages spanned multiple TCP segments, some SSL decrypted sessions failed.

Fixed an issue where Panorama did not display the Source Dynamic Address Group.

Fixed an issue where the firewall showed the status of SFP+ interfaces as not up, or up but not configured, when a PAN-SFP-PLUS-SR cable was connected.

Fixed an issue where the logrcvr process stopped responding due to a memory leak and buffer overrun.

(VM-Series firewalls in Microsoft Azure environments only) Fixed an issue where the firewall displayed 0 for the physical port counters read from MAC.

A fix was made to address CVE-2024-3393.

Fixed an issue on the firewall where enabling flow basic caused the firewall to stop responding due to a masterd process restart.

Fixed an intermittent issue where file downloads from websites failed when decrypting HTTP/2 traffic.

Fixed an issue where the Policy page on the Panorama web interface was slower than expected when a device group had a large number of managed devices.

Fixed an issue where DNS Proxy dropped client requests of the type ns for a root domain.

Fixed an issue here the tund process stopped responding, which caused push operation to managed firewalls or making changes to local firewalls to fail.

Fixed an issue where link flaps occurred on Panorama appliances in HA configurations.