Disclaimer

Hotfix versions were inferred because the vendor did not list them explicitly: 11.1.10-h1, 11.1.10-h2, 11.1.10-h3, 11.1.10-h4, 11.1.10-h5, 11.1.10-h6, 11.1.10-h7, 11.1.10-h8, 11.1.10-h9, 11.1.10-h10, 11.1.10-h11, 11.1.10-h12, 11.1.10-h13, 11.1.10-h14, 11.1.10-h15, 11.1.10-h16, 11.1.10-h17, 11.1.10-h18, 11.1.10-h19, 11.1.10-h20, 11.1.13-h1 Known affected versions were inferred from fixed-version data and were not explicitly confirmed by the vendor: 11.2.10-h13, 12.1.4-h3

The earliest recollection of this bug is traced back to PAN-OS 11.1.10-h21 - September 09, 2026. This bug is fixed in PAN-OS versions 11.2.11, 12.1.5, 11.1.13-h2, 11.1.14, 11.1.10-h21. ( Panorama managed firewalls in HA configurations only ) Fixed an issue where firewalls incorrectly updated the modified date and MD5 hash of policy rules during an HA sync commit job or a subsequent local commit, even when no changes were made to the policy rules. For more information: https://docs.paloaltonetworks.com/ngfw/release-notes/12-1/pan-os-12-1-5-known-and-addressed-issues/pan-os-12-1-5-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-10-known-and-addressed-issues/pan-os-11-1-10-h21-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-13-known-and-addressed-issues/pan-os-11-1-13-h2-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-14-known-and-addressed-issues/pan-os-11-1-14-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-11-known-and-addressed-issues/pan-os-11-2-11-addressed-issues