> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsiam-rn/cortex-xsiam-release-information/maintenance-releases/xdr-collectors-153-major.md). # XDR Collectors 1.5.3 (Major) The XDR Collectors major release for Windows 1.5.3.2503 and Linux 1.5.3.2371 was released as part of the following releases of Cortex XSIAM: * 3.6 on July 20, 2026 The following table describes the changes integrated for this release: | ISSUE | DESCRIPTION | | ------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | CPATR-38430, CPATR-38431 | Upgraded OpenSSL to version 3.5.0, Python to version 3.13.1, and SQLite to version 3.53.2 for Linux XDR Collectors, and upgraded OpenSSL to version 3.5.0, Python to version 3.12.13, and SQLite to version 3.53.2 for Windows XDR Collectors to address known vulnerabilities and enhance system stability. This update also resolves intermittent status reporting failures and improves metric accuracy during high-volume log ingestion. | | CPATR-36278 | Fixed an issue where Winlogbeat or Filebeat services could fail to start after upgrading the XDR Collectors, ensuring consistent log collection across versions. | | CPATR-35140 | Fixed an issue where a failure to correctly read the current software version could cause the Winlogbeat or Filebeat services to stop unexpectedly on the XDR Collector. | | CPATR-35180, CRTX-221926 | Cortex XDR/XSIAM/Cloud now supports version 9.3.2 Filebeat and Winlogbeat for 64-bit XDR Collectors. Live 64-bit XDR Collectors receive this update automatically, while 32-bit XDR Collectors remain unaffected, as this independent update is not tied to any specific XDR Collectors version. | | CPATR-38862, CPATR-35424 | Addressed security vulnerabilities and applied hardening measures to ensure the ongoing security and integrity of XDR Collectors. | | CPATR-37182 | Fixed an issue where the XDR Collectors service failed to start on certain Linux distributions (RHEL, Oracle, Rocky, and Alma) when SELinux was enabled in Enforcing mode. | | CPATR-37025 | Fixed an issue in high-volume environments where log data could be deleted before upload due to disk space limits being reached within the default reporting interval. The default upload interval has been reduced from 60 seconds to 3 seconds to ensure more frequent data delivery and prevent data loss. | | CPATR-36949 | Fixed an issue where log rotation for specific internal processes did not function correctly, which could lead to increased disk space usage on the host machine. | | CPATR-36650 | Fixed an issue where XDR Collectors failed to resolve their local IP address when using a Broker VM or proxy without direct internet access. | | CPATR-36400 | Fixed an issue where the XDR Collectors installation script failed to execute correctly on Rocky Linux. | | CPATR-35857 | Fixed a logic error where an uninitialized variable in the SSL utility script could cause secondary errors during exception handling. | | CPATR-35472 | Fixed a race condition issue where concurrent database access could result in database locks or data inconsistencies during log processing. | | CPATR-34985 | Fixed an issue where the XDR Collectors could repeatedly attempt to upload a corrupted ZIP file, improving the reliability of data synchronization. | | CPATR-33916 | Fixed a rare issue where the XDR Collectors could crash during the registration process if no network connection was available. | --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://cortex-docs.paloaltonetworks.com/cortex-xsiam-rn/cortex-xsiam-release-information/maintenance-releases/xdr-collectors-153-major.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.