Files
2026-05-15 09:34:02 -05:00

3.0 KiB

type, product, version
type product version
Addressed PAN-OS 11.1.10-h25

BLANK-000000

Fixes were made to address the following CVEs:

PAN-323243

Fixed an issue where a configd crash occurred when the Policies > Security view was updated or refreshed in the web interface.

PAN-317215

VM-Series firewalls on ESXi with Intel E810 NICs using PCI passthrough

Fixed an issue where the brdagent process became unresponsive during data port initialization, which resulted in system instability, interface outages, HA split-brain conditions, and unexpected reboots during failover.

PAN-317155

Fixed an issue where the link status of log port 1 and log port 2 were unable to be monitored via SNMP due to the OIDs for the individual ports not being available.

PAN-314875

PA-7500 firewalls only

Fixed an issue where firewall logs were not visible in the Strata Logging Service even though cloud logging was enabled and the firewall was successfully forwarding logs.

PAN-314126

Fixed an issue where session rematch did not properly apply updated Security policy rules to existing traffic flows after committing changes, which caused traffic to still be allowed when a new Security policy was set to Deny.

PAN-311166

Fixed an issue where the firewall rebooted unexpectedly to the all_task_1 process repeatedly restarting.

PAN-310472

Fixed an issue on the web interface where checkboxes for default information originate and ABR in OSPF NSSA configurations were automatically enabled which resulted in unexpected configuration changes.

PAN-308377

PA-7050 firewalls in HA configurations only

Fixed an issue where the firewall reached 100% disk utilization due to the logrcvr process repeatedly restarting and dumping core files due to a blocked hints processing thread, which caused a failover.

PAN-307714

VM-Series firewalls only

Fixed an issue where insufficient i-node space was available on the sysroot0 partition.

PAN-302196

Fixed an issue where the dataplane stopped responding when cleaning up expired sessions currently in Advanced Threat Prevention hold mode.

PAN-277629

Fixed an issue where the firewall did not match the correct policy for SSL forward decrypted HTTP/2 traffic when upgrading from PAN-OS 10.2.9-h1 to PAN-OS 11.2.3.