224 lines
8.3 KiB
Markdown
224 lines
8.3 KiB
Markdown
---
|
|
type: Addressed
|
|
product: PAN-OS
|
|
version: 10.0.10
|
|
source: common-crawl
|
|
crawl: CC-MAIN-2026-12
|
|
---
|
|
|
|
## PAN-190175
|
|
|
|
A fix was made to address an OpenSSL infinite loop vulnerability in the PAN-OS software ([CVE-2022-0778](https://security.paloaltonetworks.com/CVE-2022-0778)).
|
|
|
|
## PAN-190223
|
|
|
|
A fix was made to address an OpenSSL infinite loop vulnerability in the PAN-OS software ([CVE-2022-0778](https://security.paloaltonetworks.com/CVE-2022-0778)).
|
|
|
|
## PAN-189665
|
|
|
|
```caveat
|
|
FIPS-CC enabled firewalls only
|
|
```
|
|
|
|
Fixed an issue where the firewall was unable to connect to log collectors after an upgrade due to missing cipher suites.
|
|
|
|
## PAN-185616
|
|
|
|
Fixed an issue where the firewall sent fewer logs to the system log server than expected. With this fix, the firewall accommodates a larger send queue for syslog forwarding to TCP syslog receivers.
|
|
|
|
## PAN-185163
|
|
|
|
Fixed an issue where the distributord process hit the FD limit, which caused User-ID redistribution to not function properly.
|
|
|
|
## PAN-184693
|
|
|
|
Fixed an issue that caused the slotd process to stop responding due to an incorrect response from etcd lock API.
|
|
|
|
## PAN-183862
|
|
|
|
Fixed an issue where, after a CN-NGFW pod failed-over to the second CN-MGMT pod, the configuration was not synchronized between the new CN-MGMT pod and the CN-NGFW pod.
|
|
|
|
## PAN-183774
|
|
|
|
Fixed an memory leak issue in the mgmtsrvr process, which resulted in an out-of-memory (OOM) condition and high availability (HA) failover.
|
|
|
|
## PAN-183239
|
|
|
|
Fixed an issue where the firewall randomly disconnected from the WildFire URL cloud.
|
|
|
|
## PAN-182903
|
|
|
|
Fixed an issue where SD-WAN failover on a hub or branch in full mesh took longer than expected.
|
|
|
|
## PAN-181839
|
|
|
|
Fixed an issue where Panorama Global Search reported **No Matches found** while still returning results for matching entries on large configurations.
|
|
|
|
## PAN-181039
|
|
|
|
Fixed an issue with DNS cache depletion that caused continuous DNS retries.
|
|
|
|
## PAN-181031
|
|
|
|
Fixed an issue where the CN-NGFW (DP) folder on the CN-MGMT pod eventually consumed a large amount of space in the /var/log/pan because the old registered stale next-generation firewall logs were not being cleared.
|
|
|
|
## PAN-180916
|
|
|
|
Fixed an issue where DNS security caused the TTL (time-to-live) value of the pointer record (PTR) to be overwritten with a value of 30 seconds.
|
|
|
|
## PAN-179982
|
|
|
|
Fixed an issue where an OOM condition occurred due to quarantine list redistribution.
|
|
|
|
## PAN-179976
|
|
|
|
Fixed an issue where the WildFire Inline Machine Learning (ML) did not detect mlav-test-pe-file.exe when traffic was decrypted.
|
|
|
|
## PAN-179703
|
|
|
|
Fixed an issue where dataplane interfaces weren't released when the secured application pods were deleted.
|
|
|
|
## PAN-179413
|
|
|
|
Fixed an issue where GRE tunnels flapped during commit jobs.
|
|
|
|
## PAN-179321
|
|
|
|
A validation error was added to inform an administrator when a policy field contained the value **any**.
|
|
|
|
## PAN-179274
|
|
|
|
Fixed an issue on high availability configurations where, after upgrading to PAN-OS 9.1.10, PAN-OS 10.0.6, or PAN-OS 10.1.0, the HA1 and HA1-Backup link stayed down. This issue occurred when the peer firewall IP address was in a different subnet.
|
|
|
|
## PAN-179164
|
|
|
|
Fixed an issue where a web-proxy port number was added to the destination URL when captive portal authentication was run.
|
|
|
|
## PAN-179059
|
|
|
|
Fixed an issue where you were unable to delete dynamic address groups one at a time using XML API.
|
|
|
|
## PAN-178947
|
|
|
|
Fixed an issue where the useridd process stopped responding when a NULL reference attempted to be dereferenced. This issue occurred to IP address users being added.
|
|
|
|
## PAN-177907
|
|
|
|
Fixed an issue where, after rebooting the firewall, FQDN address objects referred in rules in a virtual system (vsys) did not resolve when the vsys used a custom DNS proxy.
|
|
|
|
## PAN-177878
|
|
|
|
Fixed an issue where a role-based admin with **Operational Requests** enabled under the XML API section was unable to set the License Deactivation API key.
|
|
|
|
## PAN-177626
|
|
|
|
Fixed an issue where aggressive situations caused on-chip descriptor exhaustion.
|
|
|
|
## PAN-177551
|
|
|
|
A fix was made to address a vulnerability that enabled an authenticated network-based administrator to upload a specifically created configuration that disrupted system processes and was able to execute arbitrary code with root privileges when the configuration was committed ([CVE-2022-0024](https://security.paloaltonetworks.com/CVE-2022-0024)).
|
|
|
|
## PAN-177187
|
|
|
|
Fixed an issue where reports using the decryption summary database and Panorama as data sources returned no results.
|
|
|
|
## PAN-177170
|
|
|
|
Fixed an issue on Panorama where a log collector group commit deleted the proxy settings configured on dedicated log collectors.
|
|
|
|
## PAN-176889
|
|
|
|
Fixed an issue where the log collector continuously disconnected from Panorama due to high latency and a high number of packets in Send-Q.
|
|
|
|
## PAN-176703
|
|
|
|
Fixed an issue that occurred after upgrading to a PAN-OS 9.0 or later release where commits to the firewall configuration failed with the following error message: statistics-service is invalid.
|
|
|
|
## PAN-176348
|
|
|
|
Fixed an issue where scheduled email alerts were not forwarded to all recipients in the override list.
|
|
|
|
## PAN-175716
|
|
|
|
Fixed an issue where sorting address groups by name, address, or location did not work on a device group that was part of a nested device group.
|
|
|
|
## PAN-175628
|
|
|
|
```caveat
|
|
PA-5200 Series firewalls only
|
|
```
|
|
|
|
Fixed an issue where the firewall was unable to monitor AUX1 and AUX2 interfaces through SNMP.
|
|
|
|
## PAN-175259
|
|
|
|
Fixed an issue where a Security policy configured with App-ID and set to **web-browsing** and **application-default service** allowed clear-text web-browsing on tcp/443.
|
|
|
|
## PAN-175161
|
|
|
|
Fixed an issue where changing SSL connection validation settings for system logs caused the mgmtsrvr process to stop responding.
|
|
|
|
## PAN-174809
|
|
|
|
Fixed an issue where a process (all_pktproc) restarted.
|
|
|
|
## PAN-174607
|
|
|
|
Fixed an intermittent issue where, when Security profiles were attached to a policy, files that were downloaded across TLS sessions decrypted by the firewall were malformed.
|
|
|
|
## PAN-174587
|
|
|
|
Fixed an issue where, in the case of multiple AWS Partner Network (APN) connections, the GPRS tunneling protocol (GTPv2) Create Session Requests were sent to the firewall within a short interval, which caused the firewall to create the GTP-sessions incorrectly.
|
|
|
|
## PAN-174011
|
|
|
|
Fixed an issue where Panorama failed to update shared policies during partial commits when a new device group was created but not yet committed.
|
|
|
|
## PAN-171345
|
|
|
|
Fixed an issue where firewalls experienced high packet descriptor usage due to internal communication associated with WildFire.
|
|
|
|
## PAN-171181
|
|
|
|
Fixed an issue where the IPSec tunnel configuration didn't load when a double quotation mark was added to the comment section of the IPSec tunnel **General** tab.
|
|
|
|
## PAN-171104
|
|
|
|
Fixed an issue where a race-condition check returned a false negative, which caused a process (all_task) to stop responding and generate a core file.
|
|
|
|
## PAN-170952
|
|
|
|
Fixed script issues that caused diagnostic data to not be collected after path monitor failure.
|
|
|
|
## PAN-168400
|
|
|
|
Fixed an issue where, after installing Cloud Services plugin 10.2, the **Plugin cloud_services** status (**Dashboard > High Availability**) displayed as **Mismatch**.
|
|
|
|
## PAN-168286
|
|
|
|
Fixed a memory leak issue in the mgmtsrvr process that was caused by failed commit all operations.
|
|
|
|
## PAN-167849
|
|
|
|
Fixed an issue where URL Filtering incorrectly identified the firewall serial number in the certificate **Common Name** field as the IP address.
|
|
|
|
## PAN-164871
|
|
|
|
```caveat
|
|
VM-Series firewalls only
|
|
```
|
|
|
|
Fixed an intermittent issue where deactivating the firewall via XML API using manual mode failed. This occurred because the size of the license token file was incorrect.
|
|
|
|
## PAN-163245
|
|
|
|
Fixed an issue where a commit-all or push to the firewall from Panorama failed with the following error message: client routed requesting last config in the middle of a commit/validate. Aborting current commit/validate.
|
|
|
|
## PAN-161297
|
|
|
|
Fixed an interoperability issue with other vendors when IKEv2 used SHA2-based certificate authentication.
|
|
|
|
## PAN-155448
|
|
|
|
Fixed an issue where credential detection didn't work in IP address-to-username mapping mode because the firewall compared the unnormalized IP-address-to-username mapping format to the normalized username extracted from the payload where the username and password were submitted.
|