> For the complete documentation index, see [llms.txt](https://docs.prismacloud.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.prismacloud.io/ce-release-notes/32/prisma-tm-cloud-compute-edition-release-information/release-notes-32-03.md).

# 32.03 (Build 32.03.125)

The following table outlines the release particulars:

| Build        | 32.03.125                                                        |
| ------------ | ---------------------------------------------------------------- |
| Code name    | O’Neal - Update 3, 32.03                                         |
| Release date | February 26th, 2024                                              |
| Type         | Maintenance Release                                              |
| SHA-256      | a0eaa3d27aa3275de75fc720417a2de7f730bbd9a3ac60cc3db4af87415817e0 |

Review the [system requirements](https://docs.prismacloud.io/en/compute-edition/32/admin-guide/install/system-requirements) to learn about the supported operating systems, hypervisors, runtime, tools, and orchestrators.

## Upgrade from Previous Releases

### Upgrade Defender Versions 22.12 and Earlier

With the `v32.00` release, [Defender versions supported (n, n-1, and n-2)](https://docs.prismacloud.io/en/compute-edition/32/admin-guide/upgrade/support-lifecycle) are `v32.00`, `v31.00`, and `v30.00`.

To prepare for this update, you must upgrade your Defenders from version `v22.12` (Lagrange) or earlier to a later version. Failure to upgrade Defenders will result in disconnection of any Defender version below `v30.00` such as `v22.12`.

### Upcoming Defender Obsolescence

With the upcoming `v33.00` release, release `v30.xx` defenders will be obsolete. To prepare for this coming update, plan for upgrading to release `v31.xx` or later at the earliest.

### Upgrade the Prisma Cloud Console

With the `v32.00` release, the [supported Console versions (n, n-1, and n-2)](https://docs.prismacloud.io/en/compute-edition/32/admin-guide/upgrade/support-lifecycle) are `v32.00`, `v31.00`, and `v30.00`.

You can upgrade the Prisma Cloud console directly from any version for n-1 to n. With `v30.00` as n-1 and `v31.00` as n, you can for example go directly from `v30.01.153` to `v31.00.129`.

You have to upgrade any version of `v22.00` to `v30.00` before upgrading to `v31.00`. For example, you can upgrade from `v22.12.693` to `v30.02.123` and then upgrade to `v32.00.159`.

## Enhancements

| FEATURE                                                   | DESCRIPTION                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
| --------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Support Amazon Linux 2023**                             | Prisma Cloud now supports Amazon Linux 2023 OS scans and security feed integration for Amazon Linux 2023.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| **Enhanced CSV Organization**                             | Segregating vulnerability and compliance findings based on Download Context.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
| **Enhanced Compliance Report**                            | Added a new **Result** column to the compliance report CSV file. To get the report, go to **Monitor > Compliance > Compliance Explorer** and select **Containers**, **Images**, or **Hosts**. The new column shows either **pass** or **fail** for each resource and the corresponding compliance check ID.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
| **Detect Go Stdlib Vulnerabilities at the Package Level** | In O’Neal Update 3, Prisma Cloud has enhanced its capability to detect vulnerabilities in Go libraries. Previously, a broad approach was used for Go stdlib libraries, categorizing CVEs as "Go" vulnerabilities rather than associating them with specific vulnerable standard libraries. This update offers a more precise classification, allowing for the identification of specific vulnerable symbols within libraries. Moreover, the latest agents can now detect both stdlib with symbols they utilize and the installed Go runtime. This comprehensive approach enables Prisma Cloud to conduct more accurate vulnerability assessments, leading to a significant reduction in false positives. If you have utilized the Go detection capabilities previously, you are likely to experience a noticeable reduction in the number of reported vulnerabilities due to this improvement. |

## API Changes and New APIs

| **Split Vulnerability and Compliance CSV**                                                    | <p>The following APIs include a new parameter, <code>issueType</code>:</p><ul><li><a href="https://pan.dev/compute/api/get-hosts-download/">Download Host Scan Results</a></li><li><a href="https://pan.dev/compute/api/get-images-download/">Download Image Scan Results</a></li><li><a href="https://pan.dev/compute/api/get-registry-download/">Download Registry Scan Results</a></li><li><a href="https://pan.dev/compute/api/get-scans-download/">Download CI Image Scan Results</a></li><li><a href="https://pan.dev/compute/api/get-vms-download/">Download VM Image Scan Results</a></li><li><a href="https://pan.dev/compute/api/get-serverless-download/">Download Serverless Function Scan Results</a></li></ul><p>The <code>issueType</code> parameter can be set to <code>vulnerabilities</code> or <code>compliance</code> for downloading vulnerability or compliance issues respectively. If either value is not provided, both vulnerability and compliance issues are downloaded.</p>                                                                                                                                                                                                                                                              |
| --------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **"Type" field is internal only - not returned in 'vulnerabilities' API json (scan results)** | <p>The following APIs include a new parameter, <code>packageType</code>:</p><p><a href="https://pan.dev/compute/api/get-containers/">Get Container Scan Results</a> <a href="https://pan.dev/compute/api/get-hosts/">Get Host Scan Results</a> <a href="https://pan.dev/compute/api/post-hosts-evaluate/">Resolve Hosts</a> <a href="https://pan.dev/compute/api/get-images/">Get Image Scan Results</a> <a href="https://pan.dev/compute/api/post-images-evaluate/">Resolve Images</a> <a href="https://pan.dev/compute/api/get-scans/">Get All CI Image Scan Results</a> <a href="https://pan.dev/compute/api/post-scans/">Add CLI Scan Result</a> <a href="https://pan.dev/compute/api/get-serverless/">Get Serverless Function Scan Results</a> <a href="https://pan.dev/compute/api/post-serverless-evaluate/">Resolve Functions</a> <a href="https://pan.dev/compute/api/get-vms/">Get VM Image Scan Results</a> <a href="https://pan.dev/compute/api/post-coderepos-ci-evaluate/">Resolve Code Repos</a> <a href="https://pan.dev/compute/api/post-sandbox/">Add Sandbox Scan Result</a> <a href="https://pan.dev/compute/api/get-registry/">Get Registry Scan Results</a></p><p>The ‘packageType’ field is added to the vulnerabilities schema responses.</p> |
| **New incident policies based on traffic observation**                                        | <p>This update adds two new policies that alert you to traffic that includes:</p><ul><li>Sensitive data sent through an API endpoint that is exposed to the internet without authentication.</li><li>Sensitive data sent through an API endpoint that is exposed to the internet without encryption.</li></ul>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |

## Addressed Issues

| **WAAS**                      | Improved accuracy of information leakage detection that resolves some false positives.                                                                                                                                                                                                                                                |
| ----------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Tools**                     | Fixed twistcli tarball scan failing on hardlinks to symlinks without target files.                                                                                                                                                                                                                                                    |
| **CVE Type Mapping Mismatch** | <p>The following changes are done to the CVE package type names:</p><ul><li><code>binary</code> changed to <code>Application</code></li><li><code>Product</code> changed to <code>Application</code></li><li><code>package</code> changed to <code>OS</code></li><li><code>javascript</code> changed to <code>nodejs</code></li></ul> |
| **Vulnerability Management**  | Fixed a filtering issue that excluded Ruby’s app and OS vulnerabilities during evaluation.                                                                                                                                                                                                                                            |
| **Vulnerability Management**  | Fixed an issue that resulted in duplicate CVE records because of inconsistencies in the CPE list that is included in the RHEL feeds.                                                                                                                                                                                                  |
| **Registry Scanning**         | Fixed an issue that caused previous scan results of a failed registry scan to be removed.                                                                                                                                                                                                                                             |
| **Agentless Scanning**        | The agentless scanner boot volume now enforces encryption by default.                                                                                                                                                                                                                                                                 |
| \*Vulnerability Scan          | Fixed an issue that caused duplicate jar entries with mismatched versions in vulnerability scan reports.                                                                                                                                                                                                                              |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.prismacloud.io/ce-release-notes/32/prisma-tm-cloud-compute-edition-release-information/release-notes-32-03.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.