Disclaimer

Hotfix versions were inferred because the vendor did not list them explicitly: 11.1.6-h1, 11.1.6-h2, 11.1.6-h3, 11.1.6-h4, 11.1.6-h5, 11.1.6-h6, 11.1.6-h7, 11.1.6-h8, 11.1.6-h9, 11.1.6-h10, 11.1.6-h11, 11.1.6-h12, 11.1.6-h13, 11.1.6-h14, 11.1.6-h15, 11.1.6-h16, 11.1.6-h17, 11.1.6-h18, 11.1.6-h19, 11.1.6-h20, 11.1.6-h21, 11.1.6-h22, 11.1.6-h23, 11.1.6-h24, 11.1.6-h25, 11.1.6-h26, 11.1.6-h27, 11.1.6-h28, 11.1.10-h1, 11.1.10-h2, 11.1.10-h3, 11.1.10-h4, 11.1.10-h5, 11.1.10-h6, 11.1.10-h7, 11.1.10-h8, 11.1.10-h9, 11.1.10-h10, 11.1.10-h11, 11.1.10-h12, 11.1.10-h13, 11.1.10-h14, 11.1.10-h15, 11.1.10-h16, 11.1.10-h17, 11.1.10-h18, 11.1.10-h19, 11.1.10-h20, 11.1.13-h1, 11.1.13-h2 Known affected versions were inferred from fixed-version data and were not explicitly confirmed by the vendor: 11.2.10-h13, 12.1.4-h5

The earliest recollection of this bug is traced back to PAN-OS 11.1.10-h21 - September 09, 2026. This bug is fixed in PAN-OS versions 11.1.10-h21, 11.1.6-h29, 12.1.5, 11.1.13-h3, 11.2.11, 12.1.4. ( Firewalls in active/active HA configurations only ) Fixed an issue where, when a commit operation was in progress, newly deployed IP address tags that used the XML API were not immediately reflected in address group resolution, which delayed IP address mapping to address groups and caused traffic to be incorrectly allowed or denied. ( Firewalls in active/active HA configurations only ) Added a log enhancement to capture an issue where, when a commit operation was in progress, newly deployed IP address tags that used the XML API were not immediately reflected in address group resolution, which delayed IP address mapping to address groups and caused traffic to be incorrectly allowed or denied. For more information: https://docs.paloaltonetworks.com/ngfw/release-notes/12-1/pan-os-12-1-4-known-and-addressed-issues/pan-os-12-1-4-addressed-issues https://docs.paloaltonetworks.com/ngfw/release-notes/12-1/pan-os-12-1-5-known-and-addressed-issues/pan-os-12-1-5-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-10-known-and-addressed-issues/pan-os-11-1-10-h21-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-13-known-and-addressed-issues/pan-os-11-1-13-h3-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-6-known-and-addressed-issues/pan-os-11-1-6-h29-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-11-known-and-addressed-issues/pan-os-11-2-11-addressed-issues