Clarification which update to use for CVE-2023-38802 (VM-100)

BPSoftware — Fri, 29 Sep 2023 02:33:12 GMT

Hi everyone.

Just wondering on which update to apply for CVE-2023-38802 on a VM-100.

says any version under 10.2.6 is affected.

suggested that it will be mitigated by 10.2.5.

Am I misunderstanding somehow?

Re: Clarification which update to use for CVE-2023-38802 (VM-100)

PavelK — Fri, 29 Sep 2023 04:44:37 GMT

the CVE-2023-38802 is addressed in PAN-OS 10.2.6:

I think the note information in preferred release page is only reference and not statement that 10.2.5 has addressed that issue.

Kind Regards

Pavel