https://live.paloaltonetworks.com/t5/psirt-articles/palo-alto-networks-security-advisories-27-july-2017/ta-p/168717 <DIV class="lia-message-template-content-zone"><P>Palo Alto Networks has published 1 new Security Advisory addressing 1 security issue.</P> <P>&nbsp;</P> <P><STRONG>New Security Advisory</STRONG></P> <P>&nbsp;</P> <P><STRONG>PAN-SA-2017-0022 - NTP Vulnerability</STRONG></P> <P>The Network Time Protocol (NTP) library has been found to contain a&nbsp;vulnerability CVE-2017-6460. Palo Alto Networks software makes use of the vulnerable library and may be affected. This issue only affects the management plane of the firewall.</P> <P>&nbsp;</P> <UL> <LI>Low Severity</LI> <LI>Fixed in PAN-OS 8.0.4</LI> <LI>Fixes for 6.1, 7.0 and 7.1 will be released on a future date</LI> <LI>CVE-2017-6460</LI> </UL> <P>Details of the issues, affected versions, and any mitigation information can be found in the Security Advisory.

</P> <P>&nbsp;</P> <P>Please visit our Security Advisories website to learn more at <A href="https://securityadvisories.paloaltonetworks.com/

" target="_self">https://securityadvisories.paloaltonetworks.com/

</A></P> <P>&nbsp;</P> <P>If you have questions, please contact support <A href="https://www.paloaltonetworks.com/company/contact-support" target="_self">https://www.paloaltonetworks.com/company/contact-support</A></P> <P>&nbsp;</P> <P>

Regards
</P> <P>Product Security Incident Response Team<BR />Palo Alto Networks</P> <P>&nbsp;</P> <P><STRONG>Updated August-07-2017</STRONG> - This advisory initially listed<SPAN>&nbsp;CVE-2016-9042. This was incorrect and PAN-OS is not&nbsp;affected by CVE-2016-9042. The security advisory has been updated to reflect&nbsp;this.</SPAN></P> </DIV> Mon, 07 Aug 2017 16:05:25 GMT kshorrock 2017-08-07T16:05:25Z https://live.paloaltonetworks.com/t5/psirt-articles/palo-alto-networks-security-advisories-27-july-2017/ta-p/168717 <DIV class="lia-message-template-content-zone"><P>Palo Alto Networks has published 1 new Security Advisory addressing 1 security issue.</P> <P>&nbsp;</P> <P><STRONG>New Security Advisory</STRONG></P> <P>&nbsp;</P> <P><STRONG>PAN-SA-2017-0022 - NTP Vulnerability</STRONG></P> <P>The Network Time Protocol (NTP) library has been found to contain a&nbsp;vulnerability CVE-2017-6460. Palo Alto Networks software makes use of the vulnerable library and may be affected. This issue only affects the management plane of the firewall.</P> <P>&nbsp;</P> <UL> <LI>Low Severity</LI> <LI>Fixed in PAN-OS 8.0.4</LI> <LI>Fixes for 6.1, 7.0 and 7.1 will be released on a future date</LI> <LI>CVE-2017-6460</LI> </UL> <P>Details of the issues, affected versions, and any mitigation information can be found in the Security Advisory.

</P> <P>&nbsp;</P> <P>Please visit our Security Advisories website to learn more at <A href="https://securityadvisories.paloaltonetworks.com/

" target="_self">https://securityadvisories.paloaltonetworks.com/

</A></P> <P>&nbsp;</P> <P>If you have questions, please contact support <A href="https://www.paloaltonetworks.com/company/contact-support" target="_self">https://www.paloaltonetworks.com/company/contact-support</A></P> <P>&nbsp;</P> <P>

Regards
</P> <P>Product Security Incident Response Team<BR />Palo Alto Networks</P> <P>&nbsp;</P> <P><STRONG>Updated August-07-2017</STRONG> - This advisory initially listed<SPAN>&nbsp;CVE-2016-9042. This was incorrect and PAN-OS is not&nbsp;affected by CVE-2016-9042. The security advisory has been updated to reflect&nbsp;this.</SPAN></P> </DIV> Mon, 07 Aug 2017 16:05:25 GMT https://live.paloaltonetworks.com/t5/psirt-articles/palo-alto-networks-security-advisories-27-july-2017/ta-p/168717 kshorrock 2017-08-07T16:05:25Z