Disclaimer

Hotfix versions were inferred because the vendor did not list them explicitly: 10.2.10-h1, 10.2.10-h2, 10.2.10-h3, 10.2.10-h4, 10.2.10-h5, 10.2.10-h6, 10.2.10-h7, 10.2.10-h8, 10.2.10-h9, 10.2.10-h10, 10.2.10-h11, 10.2.10-h12, 10.2.10-h13, 10.2.10-h14, 10.2.10-h15, 10.2.10-h16, 10.2.10-h17, 10.2.10-h18, 10.2.10-h19, 10.2.10-h20, 10.2.10-h21, 10.2.10-h22, 10.2.10-h23, 10.2.10-h24, 10.2.10-h25, 10.2.10-h26, 10.2.10-h27, 10.2.10-h28, 10.2.10-h29, 11.2.7-h1, 11.2.7-h2, 11.2.7-h3, 11.2.7-h4, 11.2.7-h5, 11.2.7-h6, 11.2.7-h7, 11.2.7-h8, 11.2.7-h9, 11.2.10-h1, 11.2.10-h2 Known affected versions were inferred from fixed-version data and were not explicitly confirmed by the vendor: 11.1.13-h10, 12.1.4-h5

The earliest recollection of this bug is traced back to PAN-OS 10.2.10-h30 - August 21, 2026. This bug is fixed in PAN-OS versions 11.2.11, 10.2.10-h30, 11.1.14, 12.1.5, 11.2.10-h3, 11.2.7-h10. Fixed an issue where DNS Security logs incorrectly displayed a sinkhole action for benign DNS categories due to the firewall saving the drop or sinkhole action in session flags without discarding the session. For more information: https://docs.paloaltonetworks.com/ngfw/release-notes/12-1/pan-os-12-1-5-known-and-addressed-issues/pan-os-12-1-5-addressed-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-10-known-and-addressed-issues/pan-os-10-2-10-h30-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-14-known-and-addressed-issues/pan-os-11-1-14-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-10-known-and-addressed-issues/pan-os-11-2-10-h3-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-11-known-and-addressed-issues/pan-os-11-2-11-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-7-known-and-addressed-issues/pan-os-11-2-7-h10-addressed-issues