45 lines
1.8 KiB
Markdown
45 lines
1.8 KiB
Markdown
---
|
|
type: Addressed
|
|
product: PAN-OS
|
|
version: 11.2.7-h18
|
|
---
|
|
|
|
## BLANK-000000
|
|
|
|
Fixes were made to address the following CVEs:
|
|
|
|
- [CVE-2026-0283](https://security.paloaltonetworks.com/CVE-2026-0283)
|
|
- [CVE-2026-0287](https://security.paloaltonetworks.com/CVE-2026-0287)
|
|
- [CVE-2026-0279](https://security.paloaltonetworks.com/CVE-2026-0279)
|
|
- [CVE-2026-0282](https://security.paloaltonetworks.com/CVE-2026-0282)
|
|
- [CVE-2026-0288](https://security.paloaltonetworks.com/CVE-2026-0288)
|
|
- [CVE-2026-0286](https://security.paloaltonetworks.com/CVE-2026-0286)
|
|
- [CVE-2026-0285](https://security.paloaltonetworks.com/CVE-2026-0285)
|
|
- [CVE-2026-0280](https://security.paloaltonetworks.com/CVE-2026-0280)
|
|
- [CVE-2026-0284](https://security.paloaltonetworks.com/CVE-2026-0284)
|
|
- [CVE-2026-0281](https://security.paloaltonetworks.com/CVE-2026-0281)
|
|
|
|
## PAN-308775
|
|
|
|
```caveat
|
|
Firewalls in active/passive configurations only
|
|
```
|
|
|
|
Fixed an issue where NTP status intermittently showed as rejected on the active firewall, which prevented the firewalls from synchronizing time.
|
|
|
|
## PAN-308606
|
|
|
|
Fixed an issue where traffic was blocked due to a mismatch between the URL category specified in the Security policy rule and the URL filter profile when custom URL categories with the same FQDN were configured.
|
|
|
|
## PAN-295854
|
|
|
|
Fixed an issue where the firewall generated two URL logs for a single session.
|
|
|
|
## PAN-293707
|
|
|
|
Fixed an issue where the iotd process failed to install DPI Cloud server FQDN due to a configuration parsing failure, caused by the configuration XML memory buffer not being NULL terminated. This resulted in the accumulation of EAL logs and DLP forwarding being stopped.
|
|
|
|
## PAN-289895
|
|
|
|
Fixed an issue where, when SSL decryption was enabled, traffic matching a deny rule was incorrectly allowed until the SSL handshake was complete.
|