firewallissues/reference/PAN-OS/addressed/10.2.8-h21.html

<table class="table colsep rowsep table-striped">
  <!--cq:include script="../../common/tablestack.jsp" /-->

  <colgroup>
    <col style="width: 25%" />
    <col style="width: 75%" />
  </colgroup>
  <thead class="thead">
    <tr class="row rowsep">
      <th class="entry">
        <div class="p"><b class="ph b">Issue ID</b></div>
      </th>
      <th class="entry">
        <div class="p"><b class="ph b">Description</b></div>
      </th>
    </tr>
  </thead>

  <tbody class="tbody">
    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-279604</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where scheduled SaaS application usage reports were
          generated incorrectly, and the login page was displayed instead of the
          report content.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-273994</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          A fix was made to address
          <a
            class="xref"
            href="https://security.paloaltonetworks.com/CVE-2025-0111"
            title=""
            data-scope="external"
            data-format="html"
            data-type=""
            target="_blank"
            >CVE-2025-0111</a
          >.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-273971</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          A fix was made to address
          <a
            class="xref"
            href="https://security.paloaltonetworks.com/CVE-2025-0108"
            title=""
            data-scope="external"
            data-format="html"
            data-type=""
            target="_blank"
            >CVE-2025-0108</a
          >.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-273278</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          A fix was made to address
          <a
            class="xref"
            href="https://security.paloaltonetworks.com/CVE-2025-0109"
            title=""
            data-scope="external"
            data-format="html"
            data-type=""
            target="_blank"
            >CVE-2025-0109</a
          >.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-271926</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where TLS 1.3 decryption failed with a bad record MAC
          error when the firewall was configured to decrypt and inspect TLS
          traffic.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-270549</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where some TLS connections were not handled correctly,
          which led to instability in the dataplane.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268727</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where traffic was dropped when the accumulation proxy
          was enabled and header insertion modified packets.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268489</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">Fixed a Threat log PCAP ID overwrapping issue.</div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268260</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on hardware firewalls where, when SSL decryption was
          enabled and Client Hello messages spanned multiple TCP segments, some
          SSL decrypted sessions failed.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-267781</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where Panorama did not display the Source Dynamic
          Address Group.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-266479</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the manual tuning parameters set sequence was not
          correct.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-262729</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt">Panorama appliances only</tt>) Fixed an issue where
          the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >configd</a
          >
          process experienced continuous high CPU utilization and repeatedly
          restarted.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-261739</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt"
            >VM-Series firewalls in Microsoft Azure environments only</tt
          >) Fixed an issue where the firewall displayed 0 for the physical port
          counters read from MAC.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-259351</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          A fix was made to address
          <a
            class="xref"
            href="https://security.paloaltonetworks.com/CVE-2024-3393"
            title=""
            data-scope="external"
            data-format="html"
            data-type=""
            target="_blank"
            >CVE-2024-3393</a
          >.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-247511</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          A fix was made to address
          <a
            class="xref"
            href="https://security.paloaltonetworks.com/CVE-2024-3596"
            title=""
            data-scope="external"
            data-format="html"
            data-type=""
            target="_blank"
            >CVE-2024-3596</a
          >.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-238594</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall rebooted when a QSFP28 cable was
          removed from the port while the port was passing traffic.
        </div>
      </td>
    </tr>
  </tbody>
</table>