topic Re: PAN-171203 issue and latest 9.0.x releases in General Topics

PAN-171203 issue and latest 9.0.x releases

grenzi — Thu, 11 Nov 2021 08:56:55 GMT

Hello everybody,

as all you know, yesterday (or today, in US) were released updates to all PAN-OS versions addressing some issues, but I really have trouble with the PAN-171203 one. As per the PAN-OS 9.0.14-h3 Addressed Issues page (https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-release-notes/pan-os-9-0-addressed-issues/pan-os-9-0-14-h3-addressed-issues.html) the issue was resolved in the 9.0.14-h3 release, but I see the same issue listed as resolved in the PAN-OS 9.0.14-h4 Addressed Issues page (https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-release-notes/pan-os-9-0-addressed-issues/pan-os-9-0-14-h4-addressed-issues.html).

Two days ago I upgraded some firewalls (PA-3260) to PAN-OS 9.0.14-h3.

My question is: do I need to upgrade them again to 9.0.14-h4 to get rid of PAN-171203?

Thank you in advance!

Re: PAN-171203 issue and latest 9.0.x releases

aleksandar.astardzhiev — Thu, 11 Nov 2021 14:04:40 GMT

Hi @grenzi ,

I am only guessing, but almost certain that it is documentation bug. Meaning PAN-171203 was fixed in h3, but referenced by mistake in h4 release notes.

My guess is based on the documentation for 9.1 where h3 is fixing the GP DoS vulnerability, and I am suspecting that h4 is exactly the same, but for 9.0 version.

Re: PAN-171203 issue and latest 9.0.x releases

grenzi — Wed, 24 Nov 2021 13:01:01 GMT

Same issue fixed (again) in 9.1.12:

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-release-notes/pan-os-9-1-addressed-issues/pan-os-9-1-12-addressed-issues.html#panos-addressed-issues-9.1.12

It's becoming very confusing.