---
type: Addressed
product: PAN-OS
version: 10.0.10
source: common-crawl
crawl: CC-MAIN-2026-12
---

## PAN-190175

A fix was made to address an OpenSSL infinite loop vulnerability in the PAN-OS software ([CVE-2022-0778](https://security.paloaltonetworks.com/CVE-2022-0778)).

## PAN-190223

A fix was made to address an OpenSSL infinite loop vulnerability in the PAN-OS software ([CVE-2022-0778](https://security.paloaltonetworks.com/CVE-2022-0778)).

## PAN-189665

```caveat
FIPS-CC enabled firewalls only
```

Fixed an issue where the firewall was unable to connect to log collectors after an upgrade due to missing cipher suites.

## PAN-185616

Fixed an issue where the firewall sent fewer logs to the system log server than expected. With this fix, the firewall accommodates a larger send queue for syslog forwarding to TCP syslog receivers.

## PAN-185163

Fixed an issue where the distributord process hit the FD limit, which caused User-ID redistribution to not function properly.

## PAN-184693

Fixed an issue that caused the slotd process to stop responding due to an incorrect response from etcd lock API.

## PAN-183862

Fixed an issue where, after a CN-NGFW pod failed-over to the second CN-MGMT pod, the configuration was not synchronized between the new CN-MGMT pod and the CN-NGFW pod.

## PAN-183774

Fixed an memory leak issue in the mgmtsrvr process, which resulted in an out-of-memory (OOM) condition and high availability (HA) failover.

## PAN-183239

Fixed an issue where the firewall randomly disconnected from the WildFire URL cloud.

## PAN-182903

Fixed an issue where SD-WAN failover on a hub or branch in full mesh took longer than expected.

## PAN-181839

Fixed an issue where Panorama Global Search reported **No Matches found** while still returning results for matching entries on large configurations.

## PAN-181039

Fixed an issue with DNS cache depletion that caused continuous DNS retries.

## PAN-181031

Fixed an issue where the CN-NGFW (DP) folder on the CN-MGMT pod eventually consumed a large amount of space in the /var/log/pan because the old registered stale next-generation firewall logs were not being cleared.

## PAN-180916

Fixed an issue where DNS security caused the TTL (time-to-live) value of the pointer record (PTR) to be overwritten with a value of 30 seconds.

## PAN-179982

Fixed an issue where an OOM condition occurred due to quarantine list redistribution.

## PAN-179976

Fixed an issue where the WildFire Inline Machine Learning (ML) did not detect mlav-test-pe-file.exe when traffic was decrypted.

## PAN-179703

Fixed an issue where dataplane interfaces weren't released when the secured application pods were deleted.

## PAN-179413

Fixed an issue where GRE tunnels flapped during commit jobs.

## PAN-179321

A validation error was added to inform an administrator when a policy field contained the value **any**.

## PAN-179274

Fixed an issue on high availability configurations where, after upgrading to PAN-OS 9.1.10, PAN-OS 10.0.6, or PAN-OS 10.1.0, the HA1 and HA1-Backup link stayed down. This issue occurred when the peer firewall IP address was in a different subnet.

## PAN-179164

Fixed an issue where a web-proxy port number was added to the destination URL when captive portal authentication was run.

## PAN-179059

Fixed an issue where you were unable to delete dynamic address groups one at a time using XML API.

## PAN-178947

Fixed an issue where the useridd process stopped responding when a NULL reference attempted to be dereferenced. This issue occurred to IP address users being added.

## PAN-177907

Fixed an issue where, after rebooting the firewall, FQDN address objects referred in rules in a virtual system (vsys) did not resolve when the vsys used a custom DNS proxy.

## PAN-177878

Fixed an issue where a role-based admin with **Operational Requests** enabled under the XML API section was unable to set the License Deactivation API key.

## PAN-177626

Fixed an issue where aggressive situations caused on-chip descriptor exhaustion.

## PAN-177551

A fix was made to address a vulnerability that enabled an authenticated network-based administrator to upload a specifically created configuration that disrupted system processes and was able to execute arbitrary code with root privileges when the configuration was committed ([CVE-2022-0024](https://security.paloaltonetworks.com/CVE-2022-0024)).

## PAN-177187

Fixed an issue where reports using the decryption summary database and Panorama as data sources returned no results.

## PAN-177170

Fixed an issue on Panorama where a log collector group commit deleted the proxy settings configured on dedicated log collectors.

## PAN-176889

Fixed an issue where the log collector continuously disconnected from Panorama due to high latency and a high number of packets in Send-Q.

## PAN-176703

Fixed an issue that occurred after upgrading to a PAN-OS 9.0 or later release where commits to the firewall configuration failed with the following error message: statistics-service is invalid.

## PAN-176348

Fixed an issue where scheduled email alerts were not forwarded to all recipients in the override list.

## PAN-175716

Fixed an issue where sorting address groups by name, address, or location did not work on a device group that was part of a nested device group.

## PAN-175628

```caveat
PA-5200 Series firewalls only
```

Fixed an issue where the firewall was unable to monitor AUX1 and AUX2 interfaces through SNMP.

## PAN-175259

Fixed an issue where a Security policy configured with App-ID and set to **web-browsing** and **application-default service** allowed clear-text web-browsing on tcp/443.

## PAN-175161

Fixed an issue where changing SSL connection validation settings for system logs caused the mgmtsrvr process to stop responding.

## PAN-174809

Fixed an issue where a process (all_pktproc) restarted.

## PAN-174607

Fixed an intermittent issue where, when Security profiles were attached to a policy, files that were downloaded across TLS sessions decrypted by the firewall were malformed.

## PAN-174587

Fixed an issue where, in the case of multiple AWS Partner Network (APN) connections, the GPRS tunneling protocol (GTPv2) Create Session Requests were sent to the firewall within a short interval, which caused the firewall to create the GTP-sessions incorrectly.

## PAN-174011

Fixed an issue where Panorama failed to update shared policies during partial commits when a new device group was created but not yet committed.

## PAN-171345

Fixed an issue where firewalls experienced high packet descriptor usage due to internal communication associated with WildFire.

## PAN-171181

Fixed an issue where the IPSec tunnel configuration didn't load when a double quotation mark was added to the comment section of the IPSec tunnel **General** tab.

## PAN-171104

Fixed an issue where a race-condition check returned a false negative, which caused a process (all_task) to stop responding and generate a core file.

## PAN-170952

Fixed script issues that caused diagnostic data to not be collected after path monitor failure.

## PAN-168400

Fixed an issue where, after installing Cloud Services plugin 10.2, the **Plugin cloud_services** status (**Dashboard > High Availability**) displayed as **Mismatch**.

## PAN-168286

Fixed a memory leak issue in the mgmtsrvr process that was caused by failed commit all operations.

## PAN-167849

Fixed an issue where URL Filtering incorrectly identified the firewall serial number in the certificate **Common Name** field as the IP address.

## PAN-164871

```caveat
VM-Series firewalls only
```

Fixed an intermittent issue where deactivating the firewall via XML API using manual mode failed. This occurred because the size of the license token file was incorrect.

## PAN-163245

Fixed an issue where a commit-all or push to the firewall from Panorama failed with the following error message: client routed requesting last config in the middle of a commit/validate. Aborting current commit/validate.

## PAN-161297

Fixed an interoperability issue with other vendors when IKEv2 used SHA2-based certificate authentication.

## PAN-155448

Fixed an issue where credential detection didn't work in IP address-to-username mapping mode because the firewall compared the unnormalized IP-address-to-username mapping format to the normalized username extracted from the payload where the username and password were submitted.
