aaron.axvig/firewallissues
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Handle two issue IDs with one summary

Browse Source
This commit is contained in:
aaron.axvig
2026-03-20 11:13:22 -05:00
parent e59b230db7
commit b0094ec228
5 changed files with 1138 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/fixtures/PAN-OS-10.2.1-addressed/expected-parsed.json
Vendored
+331
View File
@@ -0,0 +1,331 @@
[
{
"id": "PAN-231823",
"summary": "A fix was made to address [CVE-2024-5916](https://security.paloaltonetworks.com/CVE-2024-5916).",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>A fix was made to address <a href=\"https://security.paloaltonetworks.com/CVE-2024-5916\">CVE-2024-5916</a>.</p>\n"
},
{
"id": "PAN-190311",
"summary": "Fixed an issue where management connectivity to the firewall was lost due to the expiration of the DHCP lease, which caused the IP configuration on the management port to be purged in PAN-OS 10.2.0. To upgrade, download PAN-OS 10.2.0 (no installation), then download and install PAN-OS 10.2.0-h1.",
"resolved": "",
"caveat": "PA-220 and PA-220R firewalls and PA-800 Series firewalls only",
"renderedHtml": "<div><em>Caveat: PA-220 and PA-220R firewalls and PA-800 Series firewalls only</em></div><p>Fixed an issue where management connectivity to the firewall was lost due to the expiration of the DHCP lease, which caused the IP configuration on the management port to be purged in PAN-OS 10.2.0. To upgrade, download PAN-OS 10.2.0 (no installation), then download and install PAN-OS 10.2.0-h1.</p>\n"
},
{
"id": "PAN-190175",
"summary": "A fix was made to address an OpenSSL infinite loop vulnerability in the PAN-OS software ([CVE-2022-0778](https://security.paloaltonetworks.com/CVE-2022-0778)).",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>A fix was made to address an OpenSSL infinite loop vulnerability in the PAN-OS software (<a href=\"https://security.paloaltonetworks.com/CVE-2022-0778\">CVE-2022-0778</a>).</p>\n"
},
{
"id": "PAN-190223",
"summary": "A fix was made to address an OpenSSL infinite loop vulnerability in the PAN-OS software ([CVE-2022-0778](https://security.paloaltonetworks.com/CVE-2022-0778)).",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>A fix was made to address an OpenSSL infinite loop vulnerability in the PAN-OS software (<a href=\"https://security.paloaltonetworks.com/CVE-2022-0778\">CVE-2022-0778</a>).</p>\n"
},
{
"id": "PAN-189665",
"summary": "Fixed an issue where the firewall was unable to connect to log collectors after an upgrade due to missing cipher suites.",
"resolved": "",
"caveat": "FIPS-CC enabled firewalls only",
"renderedHtml": "<div><em>Caveat: FIPS-CC enabled firewalls only</em></div><p>Fixed an issue where the firewall was unable to connect to log collectors after an upgrade due to missing cipher suites.</p>\n"
},
{
"id": "PAN-189565",
"summary": "Fixed an issue after upgrading to PAN-OS 10.2 where the tund process stopped responding on multiple GlobalProtect clients.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue after upgrading to PAN-OS 10.2 where the tund process stopped responding on multiple GlobalProtect clients.</p>\n"
},
{
"id": "PAN-189468",
"summary": "Fixed an issue where the firewall onboard packet processor used by the PAN-OS content-inspection (CTD) engine can generate high dataplane resource usage when overwhelmed by a session with an unusually high number of packets. This can result in resource-unavailable messages due to the content inspection queue filling up. Factors related to the likelihood of an occurrence include enablement of content-inspection based features that are configured in such a way that might process thousands of packets in rapid succession (such as SMB file transfers). This can cause poor performance for the affected session and other sessions using the same packet processor. PA-3000 series and VM-Series firewalls are not impacted.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where the firewall onboard packet processor used by the PAN-OS content-inspection (CTD) engine can generate high dataplane resource usage when overwhelmed by a session with an unusually high number of packets. This can result in resource-unavailable messages due to the content inspection queue filling up. Factors related to the likelihood of an occurrence include enablement of content-inspection based features that are configured in such a way that might process thousands of packets in rapid succession (such as SMB file transfers). This can cause poor performance for the affected session and other sessions using the same packet processor. PA-3000 series and VM-Series firewalls are not impacted.</p>\n"
},
{
"id": "PAN-189361",
"summary": "Fixed an issue where Panorama was unable to distribute antivirus signature updates to firewalls with an Advanced Threat Prevention license only.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where Panorama was unable to distribute antivirus signature updates to firewalls with an Advanced Threat Prevention license only.</p>\n"
},
{
"id": "PAN-189298",
"summary": "Fixed an issue where existing traffic sessions were not synced after restarting the active dataplane when it became passive.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where existing traffic sessions were not synced after restarting the active dataplane when it became passive.</p>\n"
},
{
"id": "PAN-189230",
"summary": "Fixed an issue that caused the pan_task process to stop responding with floating point exception (FPE) when there was a module of 0 on the queue number.",
"resolved": "",
"caveat": "VM-Series firewalls only",
"renderedHtml": "<div><em>Caveat: VM-Series firewalls only</em></div><p>Fixed an issue that caused the pan_task process to stop responding with floating point exception (FPE) when there was a module of 0 on the queue number.</p>\n"
},
{
"id": "PAN-189214",
"summary": "Fixed an issue that prevented antivirus signature update packages that are normally available to install from displaying properly on the firewall when the Advanced Threat Prevention license is present on a firewall without a Threat Prevention license.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue that prevented antivirus signature update packages that are normally available to install from displaying properly on the firewall when the Advanced Threat Prevention license is present on a firewall without a Threat Prevention license.</p>\n"
},
{
"id": "PAN-189206",
"summary": "Fixed an issue where Device Group and Template administrator roles didn't support a context switch between the Panorama and firewall web interfaces.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where Device Group and Template administrator roles didn't support a context switch between the Panorama and firewall web interfaces.</p>\n"
},
{
"id": "PAN-189106",
"summary": "Fixed an issue on Panorama where you were unable to successfully downgrade to a PAN-OS 10.1 release unless you uninstalled the ZTP Plugin 2.0.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue on Panorama where you were unable to successfully downgrade to a PAN-OS 10.1 release unless you uninstalled the ZTP Plugin 2.0.</p>\n"
},
{
"id": "PAN-189094",
"summary": "Fixed an issue where, after upgrading a CN-Series firewall from a PAN-OS 10.1 release to PAN-OS 10.2.0, show session commands did not return output.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where, after upgrading a CN-Series firewall from a PAN-OS 10.1 release to PAN-OS 10.2.0, show session commands did not return output.</p>\n"
},
{
"id": "PAN-189032",
"summary": "Fixed an issue where, when Advanced Routing was enabled on the firewall, an OSPFv3 interface configured with the p2mp link type caused commits to fail.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where, when Advanced Routing was enabled on the firewall, an OSPFv3 interface configured with the p2mp link type caused commits to fail.</p>\n"
},
{
"id": "PAN-188956",
"summary": "Fixed an issue where, after a successful upgrade to PAN-OS 10.2, logging into the firewall or Panorama web interface from the same internet browser window or session from which the firewall or Panorama was upgraded did not work.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where, after a successful upgrade to PAN-OS 10.2, logging into the firewall or Panorama web interface from the same internet browser window or session from which the firewall or Panorama was upgraded did not work.</p>\n"
},
{
"id": "PAN-188883",
"summary": "Fixed an issue where, when pre-generated license key files were manually uploaded via the web interface, they weren't properly recognized by PAN-OS and didn't display a serial number or initiate a reboot.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where, when pre-generated license key files were manually uploaded via the web interface, they weren't properly recognized by PAN-OS and didn't display a serial number or initiate a reboot.</p>\n"
},
{
"id": "PAN-188828",
"summary": "Fixed an intermittent issue where web pages and web page contents did not properly load when cloud inline categorization was enabled.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an intermittent issue where web pages and web page contents did not properly load when cloud inline categorization was enabled.</p>\n"
},
{
"id": "PAN-188009",
"summary": "Fixed an issue where a firewall import to Panorama running a PAN-OS 10.1 release or a PAN-OS 10.2 release resulted in corrupted private information when the master key was not used.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where a firewall import to Panorama running a PAN-OS 10.1 release or a PAN-OS 10.2 release resulted in corrupted private information when the master key was not used.</p>\n"
},
{
"id": "PAN-187846",
"summary": "Fixed an issue on Panorama where a selective push pushed an incorrect configuration to the managed firewalls, which caused the firewalls to display as out of sync. This issue occurred if the Panorama-pushed version for the **Shared Policy and Template** configuration were 20 or more versions older than the current local running configuration on Panorama.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue on Panorama where a selective push pushed an incorrect configuration to the managed firewalls, which caused the firewalls to display as out of sync. This issue occurred if the Panorama-pushed version for the <strong>Shared Policy and Template</strong> configuration were 20 or more versions older than the current local running configuration on Panorama.</p>\n"
},
{
"id": "PAN-187769",
"summary": "Fixed a Data Plane Development Kit (DPDK) issue where interfaces remained in a link-down state after an Azure hot plug event. This issue occurred due to a hot plug of Accelerated Networking interfaces on the Azure backend caused by host updates, which led to Virtual Function unregister/Register messages on the VM side.",
"resolved": "",
"caveat": "VM-Series firewalls in Microsoft Azure environments only",
"renderedHtml": "<div><em>Caveat: VM-Series firewalls in Microsoft Azure environments only</em></div><p>Fixed a Data Plane Development Kit (DPDK) issue where interfaces remained in a link-down state after an Azure hot plug event. This issue occurred due to a hot plug of Accelerated Networking interfaces on the Azure backend caused by host updates, which led to Virtual Function unregister/Register messages on the VM side.</p>\n"
},
{
"id": "PAN-186886",
"summary": "Fixed an issue where individual configuration objects were not viewable after committing selective configuration changes on a multi-vsys firewall.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where individual configuration objects were not viewable after committing selective configuration changes on a multi-vsys firewall.</p>\n"
},
{
"id": "PAN-186785",
"summary": "Fixed an issue where, after logging in, Panorama displayed a 500 error page after five minutes of logging for dynamic group template admin types with access to approximately 115 managed devices or 120 dynamic groups.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where, after logging in, Panorama displayed a 500 error page after five minutes of logging for dynamic group template admin types with access to approximately 115 managed devices or 120 dynamic groups.</p>\n"
},
{
"id": "PAN-186516",
"summary": "Fixed an issue where log queries that included WildFire submission logs returned more slowly than expected.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where log queries that included WildFire submission logs returned more slowly than expected.</p>\n"
},
{
"id": "PAN-186487",
"summary": "Fixed an issue with snmpd.log overflow caused by continuous hourly repeating errors.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue with snmpd.log overflow caused by continuous hourly repeating errors.</p>\n"
},
{
"id": "PAN-186402",
"summary": "Fixed an issue where the firewall's maximum tunnel limit was incorrect.",
"resolved": "",
"caveat": "PA-440 Series firewalls only",
"renderedHtml": "<div><em>Caveat: PA-440 Series firewalls only</em></div><p>Fixed an issue where the firewall's maximum tunnel limit was incorrect.</p>\n"
},
{
"id": "PAN-186137",
"summary": "Fixed an issue where the firewall management interface incorrectly displayed 10G port speed as an option even though 10G speed is not supported and can't be configured.",
"resolved": "",
"caveat": "PA-3400 Series firewalls only",
"renderedHtml": "<div><em>Caveat: PA-3400 Series firewalls only</em></div><p>Fixed an issue where the firewall management interface incorrectly displayed 10G port speed as an option even though 10G speed is not supported and can't be configured.</p>\n"
},
{
"id": "PAN-185616",
"summary": "Fixed an issue where the firewall sent fewer logs to the system log server than expected. With this fix, the firewall accommodates a larger send queue for syslog forwarding to TCP syslog receivers.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where the firewall sent fewer logs to the system log server than expected. With this fix, the firewall accommodates a larger send queue for syslog forwarding to TCP syslog receivers.</p>\n"
},
{
"id": "PAN-185164",
"summary": "Fixed an issue where processing corrupted IoT messages caused the wificlient process to restart.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where processing corrupted IoT messages caused the wificlient process to restart.</p>\n"
},
{
"id": "PAN-184224",
"summary": "Fixed an issue on Panorama where you were unable to select a template variable in **Templates > Device > Log Forwarding Card > Log Forwarding Card Interface > Network > IP address location**.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue on Panorama where you were unable to select a template variable in <strong>Templates &gt; Device &gt; Log Forwarding Card &gt; Log Forwarding Card Interface &gt; Network &gt; IP address location</strong>.</p>\n"
},
{
"id": "PAN-183826",
"summary": "Fixed an issue where, after clicking **WildFire Analysis Report**, the web interface failed to display the report with the following error message: refused to connect.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where, after clicking <strong>WildFire Analysis Report</strong>, the web interface failed to display the report with the following error message: refused to connect.</p>\n"
},
{
"id": "PAN-183567",
"summary": "Fixed an issue on Panorama where ZTP Plugin 2.0 was not available for download before upgrading Panorama to PAN-OS 10.2.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue on Panorama where ZTP Plugin 2.0 was not available for download before upgrading Panorama to PAN-OS 10.2.</p>\n"
},
{
"id": "PAN-182492",
"summary": "Fixed an issue where the WildFire analysis report was not viewable from the firewall WildFire submission log entry page.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where the WildFire analysis report was not viewable from the firewall WildFire submission log entry page.</p>\n"
},
{
"id": "PAN-181839",
"summary": "Fixed an issue where Panorama Global Search reported **No Matches found** while still returning results for matching entries on large configurations.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where Panorama Global Search reported <strong>No Matches found</strong> while still returning results for matching entries on large configurations.</p>\n"
},
{
"id": "PAN-181039",
"summary": "Fixed an issue with DNS cache depletion that caused continuous DNS retries.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue with DNS cache depletion that caused continuous DNS retries.</p>\n"
},
{
"id": "PAN-181031",
"summary": "Fixed an issue where the CN-NGFW (DP) folder on the CN-MGMT pod eventually consumed a large amount of space in the /var/log/pan because the old registered stale next-generation firewall logs were not being cleared.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where the CN-NGFW (DP) folder on the CN-MGMT pod eventually consumed a large amount of space in the /var/log/pan because the old registered stale next-generation firewall logs were not being cleared.</p>\n"
},
{
"id": "PAN-180338",
"summary": "Fixed an issue where the CTD loop count wasn't accurately incremented.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where the CTD loop count wasn't accurately incremented.</p>\n"
},
{
"id": "PAN-180095",
"summary": "Fixed an issue where Panorama serial-number-based redistribution agents did not redistribute HIP reports.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where Panorama serial-number-based redistribution agents did not redistribute HIP reports.</p>\n"
},
{
"id": "PAN-179966",
"summary": "Fixed an issue where, after upgrading to a PAN-OS 8.1 release, the port on the firewall stayed up, but the port on the connected device reported down. This occurred because, on force mode, autoneg was disabled by default. With this fix, autoneg is enabled by default on force mode.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where, after upgrading to a PAN-OS 8.1 release, the port on the firewall stayed up, but the port on the connected device reported down. This occurred because, on force mode, autoneg was disabled by default. With this fix, autoneg is enabled by default on force mode.</p>\n"
},
{
"id": "PAN-179420",
"summary": "Fixed an issue on Panorama where a selective push to managed firewalls failed after renaming an existing device group, template, or template stack that was already pushed to the managed firewalls and you selectively committed specific configuration objects from the renamed device group, template, or template stack.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue on Panorama where a selective push to managed firewalls failed after renaming an existing device group, template, or template stack that was already pushed to the managed firewalls and you selectively committed specific configuration objects from the renamed device group, template, or template stack.</p>\n"
},
{
"id": "PAN-179321",
"summary": "A validation error was added to inform an administrator when a policy field contained the value **any**.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>A validation error was added to inform an administrator when a policy field contained the value <strong>any</strong>.</p>\n"
},
{
"id": "PAN-178195",
"summary": "Fixed an issue where the URL filtering logs generated by traffic analyzed by Advanced URL filtering cloud inline categorization didn't display the URL name.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where the URL filtering logs generated by traffic analyzed by Advanced URL filtering cloud inline categorization didn't display the URL name.</p>\n"
},
{
"id": "PAN-177072",
"summary": "Fixed an intermittent issue where Panorama did not show new logs from firewalls.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an intermittent issue where Panorama did not show new logs from firewalls.</p>\n"
},
{
"id": "PAN-176889",
"summary": "Fixed an issue where the log collector continuously disconnected from Panorama due to high latency and a high number of packets in Send-Q.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where the log collector continuously disconnected from Panorama due to high latency and a high number of packets in Send-Q.</p>\n"
},
{
"id": "PAN-176693",
"summary": "Fixed an issue where the Activity (ACT) LEDs on the RJ-45 ports did not blink when processing network traffic.",
"resolved": "",
"caveat": "M-300 and M-700 appliances only",
"renderedHtml": "<div><em>Caveat: M-300 and M-700 appliances only</em></div><p>Fixed an issue where the Activity (ACT) LEDs on the RJ-45 ports did not blink when processing network traffic.</p>\n"
},
{
"id": "PAN-174607",
"summary": "Fixed an intermittent issue where, when Security profiles were attached to a policy, files that were downloaded across TLS sessions decrypted by the firewall were malformed.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an intermittent issue where, when Security profiles were attached to a policy, files that were downloaded across TLS sessions decrypted by the firewall were malformed.</p>\n"
},
{
"id": "PAN-145833",
"summary": "Fixed an issue where the firewall stopped recording dataplane diagnostic data in dp-monitor.log after a few hours of uptime.",
"resolved": "",
"caveat": "PA-3200 Series firewalls only",
"renderedHtml": "<div><em>Caveat: PA-3200 Series firewalls only</em></div><p>Fixed an issue where the firewall stopped recording dataplane diagnostic data in dp-monitor.log after a few hours of uptime.</p>\n"
}
]
test/fixtures/PAN-OS-10.2.1-addressed/expected.md
Vendored
+225
View File
@@ -0,0 +1,225 @@
---
type: Addressed
product: PAN-OS
version: 10.2.1
---
## PAN-231823
A fix was made to address [CVE-2024-5916](https://security.paloaltonetworks.com/CVE-2024-5916).
## PAN-190311
```caveat
PA-220 and PA-220R firewalls and PA-800 Series firewalls only
```
Fixed an issue where management connectivity to the firewall was lost due to the expiration of the DHCP lease, which caused the IP configuration on the management port to be purged in PAN-OS 10.2.0. To upgrade, download PAN-OS 10.2.0 (no installation), then download and install PAN-OS 10.2.0-h1.
## PAN-190175
A fix was made to address an OpenSSL infinite loop vulnerability in the PAN-OS software ([CVE-2022-0778](https://security.paloaltonetworks.com/CVE-2022-0778)).
## PAN-190223
A fix was made to address an OpenSSL infinite loop vulnerability in the PAN-OS software ([CVE-2022-0778](https://security.paloaltonetworks.com/CVE-2022-0778)).
## PAN-189665
```caveat
FIPS-CC enabled firewalls only
```
Fixed an issue where the firewall was unable to connect to log collectors after an upgrade due to missing cipher suites.
## PAN-189565
Fixed an issue after upgrading to PAN-OS 10.2 where the tund process stopped responding on multiple GlobalProtect clients.
## PAN-189468
Fixed an issue where the firewall onboard packet processor used by the PAN-OS content-inspection (CTD) engine can generate high dataplane resource usage when overwhelmed by a session with an unusually high number of packets. This can result in resource-unavailable messages due to the content inspection queue filling up. Factors related to the likelihood of an occurrence include enablement of content-inspection based features that are configured in such a way that might process thousands of packets in rapid succession (such as SMB file transfers). This can cause poor performance for the affected session and other sessions using the same packet processor. PA-3000 series and VM-Series firewalls are not impacted.
## PAN-189361
Fixed an issue where Panorama was unable to distribute antivirus signature updates to firewalls with an Advanced Threat Prevention license only.
## PAN-189298
Fixed an issue where existing traffic sessions were not synced after restarting the active dataplane when it became passive.
## PAN-189230
```caveat
VM-Series firewalls only
```
Fixed an issue that caused the pan_task process to stop responding with floating point exception (FPE) when there was a module of 0 on the queue number.
## PAN-189214
Fixed an issue that prevented antivirus signature update packages that are normally available to install from displaying properly on the firewall when the Advanced Threat Prevention license is present on a firewall without a Threat Prevention license.
## PAN-189206
Fixed an issue where Device Group and Template administrator roles didn't support a context switch between the Panorama and firewall web interfaces.
## PAN-189106
Fixed an issue on Panorama where you were unable to successfully downgrade to a PAN-OS 10.1 release unless you uninstalled the ZTP Plugin 2.0.
## PAN-189094
Fixed an issue where, after upgrading a CN-Series firewall from a PAN-OS 10.1 release to PAN-OS 10.2.0, show session commands did not return output.
## PAN-189032
Fixed an issue where, when Advanced Routing was enabled on the firewall, an OSPFv3 interface configured with the p2mp link type caused commits to fail.
## PAN-188956
Fixed an issue where, after a successful upgrade to PAN-OS 10.2, logging into the firewall or Panorama web interface from the same internet browser window or session from which the firewall or Panorama was upgraded did not work.
## PAN-188883
Fixed an issue where, when pre-generated license key files were manually uploaded via the web interface, they weren't properly recognized by PAN-OS and didn't display a serial number or initiate a reboot.
## PAN-188828
Fixed an intermittent issue where web pages and web page contents did not properly load when cloud inline categorization was enabled.
## PAN-188009
Fixed an issue where a firewall import to Panorama running a PAN-OS 10.1 release or a PAN-OS 10.2 release resulted in corrupted private information when the master key was not used.
## PAN-187846
Fixed an issue on Panorama where a selective push pushed an incorrect configuration to the managed firewalls, which caused the firewalls to display as out of sync. This issue occurred if the Panorama-pushed version for the **Shared Policy and Template** configuration were 20 or more versions older than the current local running configuration on Panorama.
## PAN-187769
```caveat
VM-Series firewalls in Microsoft Azure environments only
```
Fixed a Data Plane Development Kit (DPDK) issue where interfaces remained in a link-down state after an Azure hot plug event. This issue occurred due to a hot plug of Accelerated Networking interfaces on the Azure backend caused by host updates, which led to Virtual Function unregister/Register messages on the VM side.
## PAN-186886
Fixed an issue where individual configuration objects were not viewable after committing selective configuration changes on a multi-vsys firewall.
## PAN-186785
Fixed an issue where, after logging in, Panorama displayed a 500 error page after five minutes of logging for dynamic group template admin types with access to approximately 115 managed devices or 120 dynamic groups.
## PAN-186516
Fixed an issue where log queries that included WildFire submission logs returned more slowly than expected.
## PAN-186487
Fixed an issue with snmpd.log overflow caused by continuous hourly repeating errors.
## PAN-186402
```caveat
PA-440 Series firewalls only
```
Fixed an issue where the firewall's maximum tunnel limit was incorrect.
## PAN-186137
```caveat
PA-3400 Series firewalls only
```
Fixed an issue where the firewall management interface incorrectly displayed 10G port speed as an option even though 10G speed is not supported and can't be configured.
## PAN-185616
Fixed an issue where the firewall sent fewer logs to the system log server than expected. With this fix, the firewall accommodates a larger send queue for syslog forwarding to TCP syslog receivers.
## PAN-185164
Fixed an issue where processing corrupted IoT messages caused the wificlient process to restart.
## PAN-184224
Fixed an issue on Panorama where you were unable to select a template variable in **Templates > Device > Log Forwarding Card > Log Forwarding Card Interface > Network > IP address location**.
## PAN-183826
Fixed an issue where, after clicking **WildFire Analysis Report**, the web interface failed to display the report with the following error message: refused to connect.
## PAN-183567
Fixed an issue on Panorama where ZTP Plugin 2.0 was not available for download before upgrading Panorama to PAN-OS 10.2.
## PAN-182492
Fixed an issue where the WildFire analysis report was not viewable from the firewall WildFire submission log entry page.
## PAN-181839
Fixed an issue where Panorama Global Search reported **No Matches found** while still returning results for matching entries on large configurations.
## PAN-181039
Fixed an issue with DNS cache depletion that caused continuous DNS retries.
## PAN-181031
Fixed an issue where the CN-NGFW (DP) folder on the CN-MGMT pod eventually consumed a large amount of space in the /var/log/pan because the old registered stale next-generation firewall logs were not being cleared.
## PAN-180338
Fixed an issue where the CTD loop count wasn't accurately incremented.
## PAN-180095
Fixed an issue where Panorama serial-number-based redistribution agents did not redistribute HIP reports.
## PAN-179966
Fixed an issue where, after upgrading to a PAN-OS 8.1 release, the port on the firewall stayed up, but the port on the connected device reported down. This occurred because, on force mode, autoneg was disabled by default. With this fix, autoneg is enabled by default on force mode.
## PAN-179420
Fixed an issue on Panorama where a selective push to managed firewalls failed after renaming an existing device group, template, or template stack that was already pushed to the managed firewalls and you selectively committed specific configuration objects from the renamed device group, template, or template stack.
## PAN-179321
A validation error was added to inform an administrator when a policy field contained the value **any**.
## PAN-178195
Fixed an issue where the URL filtering logs generated by traffic analyzed by Advanced URL filtering cloud inline categorization didn't display the URL name.
## PAN-177072
Fixed an intermittent issue where Panorama did not show new logs from firewalls.
## PAN-176889
Fixed an issue where the log collector continuously disconnected from Panorama due to high latency and a high number of packets in Send-Q.
## PAN-176693
```caveat
M-300 and M-700 appliances only
```
Fixed an issue where the Activity (ACT) LEDs on the RJ-45 ports did not blink when processing network traffic.
## PAN-174607
Fixed an intermittent issue where, when Security profiles were attached to a policy, files that were downloaded across TLS sessions decrypted by the firewall were malformed.
## PAN-145833
```caveat
PA-3200 Series firewalls only
```
Fixed an issue where the firewall stopped recording dataplane diagnostic data in dp-monitor.log after a few hours of uptime.
test/fixtures/PAN-OS-10.2.1-addressed/input.html
Vendored
+558
View File
@@ -0,0 +1,558 @@
<table class="table colsep rowsep table-striped">
<!--cq:include script="../../common/tablestack.jsp" /-->
<colgroup>
<col style="width: 25.0%">
<col style="width: 75.0%">
</colgroup>
<thead class="thead" data-sticky-top="62" style="top: 62px;">
<tr class="row rowsep">
<th class="entry">
<div class="p"><b class="ph b">Issue ID</b></div>
</th>
<th class="entry">
<div class="p"><b class="ph b">Description</b></div>
</th>
</tr>
</thead>
<tbody class="tbody">
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">WIF-495</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue on Panorama where edits made
to an existing data filtering profile resulted in matching traffic
not being detected by Enterprise DLP.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b"><b class="ph b">PAN-231823</b></b></div>
</td>
<td class="entry relcol">
<div class="p">A fix was made to address <a class="xref" href="https://security.paloaltonetworks.com/CVE-2024-5916" title="" data-scope="external" data-format="html" data-type="" target="_blank">CVE-2024-5916</a>.</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-190311</b></div>
</td>
<td class="entry relcol">
<div class="p">(<tt class="ph tt">PA-220 and PA-220R firewalls and PA-800
Series firewalls only</tt>) Fixed an issue where management connectivity
to the firewall was lost due to the expiration of the DHCP lease,
which caused the IP configuration on the management port to be purged
in PAN-OS 10.2.0. To upgrade, download PAN-OS 10.2.0 (no installation),
then download and install PAN-OS 10.2.0-h1.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-190175 and PAN-190223</b></div>
</td>
<td class="entry relcol">
<div class="p">A fix was made to address an OpenSSL infinite
loop vulnerability in the PAN-OS software (<a class="xref" href="https://security.paloaltonetworks.com/CVE-2022-0778" title="" data-scope="external" data-format="html" data-type="" target="_blank">CVE-2022-0778</a>).
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-189665</b></div>
</td>
<td class="entry relcol">
<div class="p">(<tt class="ph tt">FIPS-CC enabled firewalls only</tt>)
Fixed an issue where the firewall was unable to connect to log collectors
after an upgrade due to missing cipher suites.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-189565</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue after upgrading to PAN-OS 10.2 where the
<a class="term" href="#" title="" data-scope="" data-format="dita" data-type="" target="_self">tund</a> process stopped responding on multiple
GlobalProtect clients.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-189468</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue where the firewall onboard
packet processor used by the PAN-OS content-inspection (CTD) engine
can generate high dataplane resource usage when overwhelmed by a
session with an unusually high number of packets. This can result
in <span class="ph systemoutput">resource-unavailable</span> messages due to
the content inspection queue filling up. Factors related to the likelihood
of an occurrence include enablement of content-inspection based
features that are configured in such a way that might process thousands
of packets in rapid succession (such as SMB file transfers). This
can cause poor performance for the affected session and other sessions
using the same packet processor. PA-3000 series and VM-Series firewalls
are not impacted.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-189361</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue where Panorama was unable
to distribute antivirus signature updates to firewalls with an Advanced
Threat Prevention license only.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-189298</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue where existing traffic sessions
were not synced after restarting the active dataplane when it became
passive.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-189230</b></div>
</td>
<td class="entry relcol">
<div class="p">(<tt class="ph tt">VM-Series firewalls only</tt>) Fixed
an issue that caused the <a class="term" href="#" title="" data-scope="" data-format="dita" data-type="" target="_self">pan_task</a> process to stop responding
with floating point exception (FPE) when there was a module of 0
on the queue number.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-189214</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue that prevented antivirus
signature update packages that are normally available to install
from displaying properly on the firewall when the Advanced Threat
Prevention license is present on a firewall without a Threat Prevention
license.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-189206</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue where Device Group and Template
administrator roles didn't support a context switch between the
Panorama and firewall web interfaces.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-189106</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue on Panorama where you were
unable to successfully downgrade to a PAN-OS 10.1 release unless
you uninstalled the ZTP Plugin 2.0.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-189094</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue where, after upgrading a
CN-Series firewall from a PAN-OS 10.1 release to PAN-OS 10.2.0,
show session commands did not return output.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-189032</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue where, when Advanced Routing
was enabled on the firewall, an OSPFv3 interface configured with
the p2mp link type caused commits to fail.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-188956</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue where, after a successful
upgrade to PAN-OS 10.2, logging into the firewall or Panorama web
interface from the same internet browser window or session from
which the firewall or Panorama was upgraded did not work.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-188883</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue where, when pre-generated
license key files were manually uploaded via the web interface,
they weren't properly recognized by PAN-OS and didn't display a
serial number or initiate a reboot.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-188828</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an intermittent issue where web pages
and web page contents did not properly load when cloud inline categorization
was enabled.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-188009</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue where a firewall import to
Panorama running a PAN-OS 10.1 release or a PAN-OS 10.2 release
resulted in corrupted private information when the master key was
not used.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-187846</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue on Panorama where a selective
push pushed an incorrect configuration to the managed firewalls,
which caused the firewalls to display as out of sync. This issue
occurred if the Panorama-pushed version for the <span class="ph uicontrol">Shared
Policy and Template</span> configuration were 20 or more versions
older than the current local running configuration on Panorama.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-187769</b></div>
</td>
<td class="entry relcol">
<div class="p">(<tt class="ph tt">VM-Series firewalls in Microsoft Azure
environments only</tt>) Fixed a Data Plane Development Kit (DPDK)
issue where interfaces remained in a link-down state after an Azure
hot plug event. This issue occurred due to a hot plug of Accelerated
Networking interfaces on the Azure backend caused by host updates,
which led to Virtual Function unregister/Register messages on the
VM side.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-186886</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue where individual configuration
objects were not viewable after committing selective configuration
changes on a multi-vsys firewall.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-186785</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue where, after logging in,
Panorama displayed a 500 error page after five minutes of logging
for dynamic group template admin types with access to approximately
115 managed devices or 120 dynamic groups.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-186516</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue where log queries that included
WildFire submission logs returned more slowly than expected.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-186487</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue with snmpd.log overflow caused by continuous hourly
repeating errors.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-186402</b></div>
</td>
<td class="entry relcol">
<div class="p">(<tt class="ph tt">PA-440 Series firewalls only</tt>)
Fixed an issue where the firewall's maximum tunnel limit was incorrect.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-186137</b></div>
</td>
<td class="entry relcol">
<div class="p">(<tt class="ph tt">PA-3400 Series firewalls only</tt>)
Fixed an issue where the firewall management interface incorrectly
displayed 10G port speed as an option even though 10G speed is not
supported and can't be configured.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-185616</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue where the firewall sent fewer
logs to the system log server than expected. With this fix, the
firewall accommodates a larger send queue for syslog forwarding
to TCP syslog receivers.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-185164</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue where processing corrupted
IoT messages caused the <span class="ph systemoutput">wificlient</span> process
to restart.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-184224</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue on Panorama where you were
unable to select a template variable in <span class="ph uicontrol">Templates &gt; Device
&gt; Log Forwarding Card &gt; Log Forwarding Card Interface &gt; Network
&gt; IP address location</span>.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-183826</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue where, after clicking <span class="ph uicontrol">WildFire Analysis
Report</span>, the web interface failed to display the report
with the following error message: <span class="ph systemoutput">refused to connect</span>.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-183567</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue on Panorama where ZTP Plugin
2.0 was not available for download before upgrading Panorama to
PAN-OS 10.2.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-182492</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue where the WildFire analysis
report was not viewable from the firewall WildFire submission log
entry page.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-181839</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue where Panorama Global Search
reported <span class="ph uicontrol">No Matches found</span> while still returning
results for matching entries on large configurations.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-181039</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue with DNS cache depletion
that caused continuous DNS retries.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-181031</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue where the CN-NGFW (DP) folder
on the CN-MGMT pod eventually consumed a large amount of space in
the /var/log/pan because the old registered stale next-generation
firewall logs were not being cleared.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-180338</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue where the CTD loop count
wasn't accurately incremented.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-180095</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue where Panorama serial-number-based redistribution
agents did not redistribute HIP reports.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-179966</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue where, after upgrading to
a PAN-OS 8.1 release, the port on the firewall stayed up, but the
port on the connected device reported down. This occurred because,
on force mode, autoneg was disabled by default. With this fix, autoneg
is enabled by default on force mode.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-179420</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue on Panorama where a selective
push to managed firewalls failed after renaming an existing device
group, template, or template stack that was already pushed to the
managed firewalls and you selectively committed specific configuration
objects from the renamed device group, template, or template stack.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-179321</b></div>
</td>
<td class="entry relcol">
<div class="p">A validation error was added to inform an
administrator when a policy field contained the value <span class="ph uicontrol">any</span>.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-178195</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue where the URL filtering logs
generated by traffic analyzed by Advanced URL filtering cloud inline
categorization didn't display the URL name.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-177072</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an intermittent issue where Panorama
did not show new logs from firewalls.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-176889</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an issue where the log collector continuously
disconnected from Panorama due to high latency and a high number
of packets in Send-Q.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-176693</b></div>
</td>
<td class="entry relcol">
<div class="p">(<tt class="ph tt">M-300 and M-700 appliances only</tt>)
Fixed an issue where the Activity (ACT) LEDs on the RJ-45 ports
did not blink when processing network traffic.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-174607</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed an intermittent issue where, when
Security profiles were attached to a policy, files that were downloaded
across TLS sessions decrypted by the firewall were malformed.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-145833</b></div>
</td>
<td class="entry relcol">
<div class="p">(<tt class="ph tt">PA-3200 Series firewalls only</tt>)
Fixed an issue where the firewall stopped recording dataplane diagnostic
data in dp-monitor.log after a few hours of uptime.
</div>
</td>
</tr>
</tbody>
</table>
test/fixtures/PAN-OS-10.2.1-addressed/meta.json
Vendored
+3
View File
@@ -0,0 +1,3 @@
{
"description": "Tests the scenario when two issue IDs are included with one description."
}