PAN-OS Ver 4.0.5. What version should I update to?

[Max]

My PA-500 is currently running on PAN-OS ver 4.0.5.

What is the recommended version i should update to?

4.1.16 or 5.1.11 or 6.0.0?

Thanks and regards.

[HULK]

Recommended and a stable release is 5.0.9. ( PAN recomended).

For 5.0.10 and 5.0.11- Limited info from field at this time. Appears to be a stable release. No major issues reported at this time

Thanks

[darren_g]

Except for the security advisory which came out yesterday recommending upgrade to 5.0.10 or better to fix both a management API key bypass issue and a cross site scripting vulnerability.

[ericgearhart]

The advisory that came out yesterday or the one that came out weeks ago? Are we thinking of the same vulnerability?

[panos]

http://securityadvisories.paloaltonetworks.com/

I think 5.0.10 will be fine.

[darren_g]

ericgearhart wrote:

The advisory that came out yesterday or the one that came out weeks ago? Are we thinking of the same vulnerability?

ericgearhart, I got two vulnerabilities the day before I posted my original reply - one of which *looked* like it was a duplicate of an earlier CSS vulnerability, the other of which referred to a management API key bypass. Both stated the vulnerability was present up to 5.0.9.

[ericgearhart]

darren.g I was referring to the vulnerability that showed up on Packet Storm weeks ago:

PA's security advisory stance needs fixing. PANOS less that 5.0.9 contains XSRF and I just happened ...

[darren_g]

ericgearhart - I didn't see that one, and the original advisory on packet storm appears to have been amended to indicate this was fixed on 5.0.9.