firewallissues/reference/PAN-OS/addressed/10.2.9-h21.html

<table class="table colsep rowsep table-striped">
  <!--cq:include script="../../common/tablestack.jsp" /-->

  <colgroup>
    <col style="width: 25%" />
    <col style="width: 75%" />
  </colgroup>
  <thead class="thead">
    <tr class="row rowsep">
      <th class="entry">
        <div class="p"><b class="ph b">Issue ID</b></div>
      </th>
      <th class="entry">
        <div class="p"><b class="ph b">Description</b></div>
      </th>
    </tr>
  </thead>

  <tbody class="tbody">
    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-279604</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where scheduled SaaS application usage reports were
          generated incorrectly, and the login page was displayed instead of the
          report content.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-274726</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where Wildfire signature generation was enabled on all
          nodes in a cluster instead of only the active node.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-273994</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          A fix was made to address
          <a
            class="xref"
            href="https://security.paloaltonetworks.com/CVE-2025-0111"
            title=""
            data-scope="external"
            data-format="html"
            data-type=""
            target="_blank"
            >CVE-2025-0111</a
          >.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-273971</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          A fix was made to address
          <a
            class="xref"
            href="https://security.paloaltonetworks.com/CVE-2025-0108"
            title=""
            data-scope="external"
            data-format="html"
            data-type=""
            target="_blank"
            >CVE-2025-0108</a
          >.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-273278</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          A fix was made to address
          <a
            class="xref"
            href="https://security.paloaltonetworks.com/CVE-2025-0109"
            title=""
            data-scope="external"
            data-format="html"
            data-type=""
            target="_blank"
            >CVE-2025-0109</a
          >.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-271926</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where TLS 1.3 decryption failed with a bad record MAC
          error when the firewall was configured to decrypt and inspect TLS
          traffic.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-270549</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where some TLS connections were not handled correctly,
          which led to instability in the dataplane.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268501</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall was unable to generate a TSF file
          due to a full root partition
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268260</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on hardware firewalls where, when SSL decryption was
          enabled and Client Hello messages spanned multiple TCP segments, some
          SSL decrypted sessions failed.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-267781</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where Panorama did not display the Source Dynamic
          Address Group.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-267671</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall rebooted unexpectedly due to the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >all_task</a
          >
          process restarting and repeated OOM conditions occurring on the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >pan_task</a
          >
          process.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-261739</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt"
            >VM-Series firewalls in Microsoft Azure environments only</tt
          >) Fixed an issue where the firewall displayed 0 for the physical port
          counters read from MAC.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-259610</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where Wildfire content installation failed for WF-500B
          clusters when deployed from Panorama using the deployment schedule.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-255820</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the WildFire signature generation check box in
          Panorama did not register a change in the configuration.
        </div>
      </td>
    </tr>
  </tbody>
</table>