aaron.axvig/firewallissues
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add PAN-OS 10.2 reference files

Browse Source
This commit is contained in:
aaron.axvig committed 2026-10-10 15:04:59 -05:00
1 parent d7ebcb4299
commit a404ee5df7
54 files changed
+25286
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

reference/PAN-OS/addressed/10.2.9-h9.html
+445
View File
@@ -0,0 +1,445 @@
<table class="table colsep rowsep table-striped">
<!--cq:include script="../../common/tablestack.jsp" /-->
<colgroup>
<col style="width: 25%" />
<col style="width: 75%" />
</colgroup>
<thead class="thead">
<tr class="row rowsep">
<th class="entry">
<div class="p"><b class="ph b">Issue ID</b></div>
</th>
<th class="entry">
<div class="p"><b class="ph b">Description</b></div>
</th>
</tr>
</thead>
<tbody class="tbody">
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-259480</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the
<a
class="term"
href="#"
title=""
data-scope=""
data-format="dita"
data-type=""
target="_self"
>varrcvr</a
>
process stopped responding after running out of memory due to how the
process queued and dequeued files for WildFire file forwarding when a
WildFire Analysis Security profile was enabled.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-259344</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where performing a configuration commit on a firewall
locally or from Panorama caused a memory leak related to the
<a
class="term"
href="#"
title=""
data-scope=""
data-format="dita"
data-type=""
target="_self"
>configd</a
>
process and resulted in a out-of-memory (OOM) condition.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-258941</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where some URLs were not accessible when connected to
Prisma Access explicit proxy.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-258442</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where changes made to the split tunnel configuration on
the Prisma Access gateway were not reflected on the GlobalProtect
client.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-257919</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where, when using explicit proxy with SAML
authentication, initiating SAML authentication with a non-GET request
resulted in a <span class="ph uicontrol">302 redirect</span> response
instead of the expected
<span class="ph uicontrol">200 ok</span> response.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-257515</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where Possible Domain Fronting Detection for HTTP/2
generated false positives. With this change, domain fronting is
limited to HTTP/1.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-257355</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where a false positive HTTP/TLS evasion alert was
generated when the domain had DNS load balance.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-257197</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where <span class="ph systemoutput">ifType</span> and
<span class="ph systemoutput">ifSpeed</span> were not populated in
asynchronous mode of SNMP operations.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-256181</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the management interface and front panel port
interface statistics were not populated in asynchronous mode of SNMP
operations.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-254422</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the firewall required a restart when an SD-WAN
policy rule was pushed from Panorama.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-254241</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the firewall stopped responding due to a high
number of SD-WAN probes being sent.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-252517</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where SNMP failed to respond to multiple Object
Identifier (OID) queries in a single SNMP GET request.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-252214</b></div>
</td>
<td class="entry relcol">
<div class="p">
A fix was made to address
<a
class="xref"
href="https://security.paloaltonetworks.com/CVE-2024-3400"
title=""
data-scope="external"
data-format="html"
data-type=""
target="_blank"
>CVE-2024-3400</a
>.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-251639</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed acn issue where an out-of-memory condition occurred due to a
memory leak related to the
<a
class="term"
href="#"
title=""
data-scope=""
data-format="dita"
data-type=""
target="_self"
>varrvcr</a
>
process when a WildFire Analysis security profile was enabled.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-251013</b></div>
</td>
<td class="entry relcol">
Fixed an issue on the web interface where the
<span class="ph uicontrol">Virtual Router</span> and
<span class="ph uicontrol">Virtual System</span>
configurations for the template incorrectly showed as
<span class="ph uicontrol">none</span>.
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-250062</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where device telemetry failed after upgrading due to
bundle generation failure.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-249814</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where multiple
<a
class="term"
href="#"
title=""
data-scope=""
data-format="dita"
data-type=""
target="_self"
>all_task</a
>
processes stopped responding, which caused the dataplane to fail.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-247099</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the firewall decrypted traffic unexpectedly when
the client hello was spread across multiple packets.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-246960</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where firewalls failed to fetch content updates from
the Wildfire Private Cloud due to an
<span class="ph uicontrol">Unsupported protocol</span> error.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-245125</b></div>
</td>
<td class="entry relcol">
<div class="p">
(<tt class="ph tt"
>VM-Series firewalls in Microsoft Azure environments only</tt
>) Fixed an issue where file descriptors were not closed due to
invalid configurations.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-244013</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the web interface did not display newly added
Anti-Spyware signatures or Vulnerability Signatures until you
refreshed the browser or logged out or in via the web interface.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-242309</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where a higher byte count (s2c) was observed for
DNS-Base application.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-239662</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue with firewalls in active/passive high availability (HA)
configurations where the NSSA default route from the active firewall
was not generated to advertise even though the backbone area default
route was advertised during a graceful restart.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-239143</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue with accessing websites when URL filtering profiles
were configured with the
<span class="ph uicontrol">block-continue</span> action and the server
used HTTP/2.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-236909</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where, when you committed the first configuration
change after booting up the firewall, the external dynamic list file
download failed until the list was refreshed. This occurred when the
configuration was pushed with a certificate profile.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-231440</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where, when a certificate profile was configured on an
external dynamic list object but the profile had been deleted or did
not exist, commits silently failed with the error
<span class="ph systemoutput">Failed to refresh EDL config</span>
instead of showing the correct validation error message
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-223418</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where heartbeats to the
<a
class="term"
href="#"
title=""
data-scope=""
data-format="dita"
data-type=""
target="_self"
>brdagent</a
>
process were lost, resultng in the process not responding, which
caused the firewall to reboot.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-164885</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue on Panorama where
<span class="ph uicontrol">Commit and Push</span> or
<span class="ph uicontrol">Push to Devices</span> operations failed
when an external dynamic list was configured to check for updates
every 5 minutes due to the commit and external dynamic fetch processes
overlapping.
</div>
</td>
</tr>
</tbody>
</table>