BugZero | Palo Alto Networks BugID PAN-256939 - Fixed an issue on the firewall where disk space wa...

Palo Alto Networks - Defect ID: PAN-256939

Fixed an issue on the firewall where disk space was low in /opt/pancfg/ , which caused dynamic content installation to fail.

Palo Alto Networks - Defect ID: PAN-256939

Fixed an issue on the firewall where disk space was low in /opt/pancfg/ , which caused dynamic content installation to fail.

Last updated on March 25th, 2026

BugZero Risk Score
6.3 Medium

Overall: 6.3

Severity: 6.4

Community: 3.7

Lifecycle: 10.0

What is the BugZero Risk Score?

Palo Alto Networks Integration

Learn more about where this data comes from

Palo Alto Networks Integration

Learn more

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

Learn more

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise

Learn more

Bug Details

Views: 3

Description

The earliest recollection of this bug is traced back to PAN-OS 10.2.10-h3 - March 25, 2026. This bug is fixed in PAN-OS versions 10.2.10-h3, 10.2.11, 11.2.3, 11.1.5. Fixed an issue on the firewall where disk space was low in /opt/pancfg/ , which caused dynamic content installation to fail. For more information: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-10-known-and-addressed-issues/pan-os-10-2-10-h3-addressed-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-11-known-and-addressed-issues/pan-os-10-2-11-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-5-known-and-addressed-issues/pan-os-11-1-5-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-3-known-and-addressed-issues/pan-os-11-2-3-addressed-issues

Change history

No changes to display

Relevant Products

Click on a version to see all relevant bugs

Affected versions:No known affected versions

Fixed versions: 10.2.10-h3, 10.2.11, 11.2.3, 11.1.5

Relevant Products

Click on a version to see all relevant bugs

Affected versions:No known affected versions

Fixed versions: 10.2.10-h3, 10.2.11, 11.2.3, 11.1.5

Top Palo Alto Networks Defects

6.3Defect ID: PAN-302855
Fixed an issue where multiple processes restarted which caused the firewall to become unstable when processing traffic.
6.3Defect ID: PAN-317548
Fixed an issue where an IMA violation occurred when Panorama accessed GRUB during the installation process, which caused upgrades from PAN-OS 12.1.4 to PAN-OS 12.1.5 to fail.
6.3Defect ID: PAN-316937
Fixed an issue where GlobalProtect users intermittently received incorrect private IP addresses after connecting to a gateway behind a Network Load Balancer (NLB).
6.3Defect ID: PAN-317068
Fixed an issue on the Panorama web interface where you were able to enable IPv6 for IKE gateways and IPSec tunnels even when IPv6 WAN was disabled, which resulted in an invalid configuration. To utilize this fix, upgrade to the latest Panorama plugin.
6.3Defect ID: PAN-314201
On firewalls running PAN-OS 12.1, IPsec VPN tunnels to third-party peer devices may experience intermittent traffic loss during rekey operations. When a new Security Association (SA) forms before the old SA expires, traffic may stop flowing until the older SA naturally expires or you manually clear it. During this time, the output of show vpn ipsec-sa may show two SAs for the same proxy ID. This issue primarily affects tunnels to third-party peer devices and does not occur with Palo Alto Networks to Palo Alto Networks tunnels. Workaround: Manually clear the affected Security Association using the command clear vpn ipsec-sa tunnel <tunnel-name> to restore connectivity.

Ready to prevent the next vendor outage?

Get a demo

Palo Alto Networks - Defect ID: PAN-256939

Fixed an issue on the firewall where disk space was low in /opt/pancfg/ , which caused dynamic content installation to fail.

Palo Alto Networks - Defect ID: PAN-256939

Fixed an issue on the firewall where disk space was low in /opt/pancfg/ , which caused dynamic content installation to fail.

Last updated on March 25th, 2026

BugZero Risk Score6.3 Medium

Bug Details

Top Palo Alto Networks Defects

Ready to prevent the next vendor outage?

Links

BugZero Risk Score
6.3 Medium