---
type: Addressed
product: PAN-OS
version: 11.0.1
---

## PAN-231823

A fix was made to address CVE-2024-5916.

## PAN-216656

Fixed an issue where the firewall was unable to fully process the user list from a child group when the child group contained more than 1,500 users.

## PAN-215911

Fixed an issue that resulted in a race condition, which caused the configd process
to stop responding.

## PAN-215488

Fixed an issue where an expired Trusted Root CA was used to sign the forward proxy leaf certificate during SSL Decryption.

## PAN-210561

Fixed an issue where the all_task process repeatedly restarted due to missed heartbeats.

## PAN-210513

Fixed an issue where Captive Portal authentication via SAML did not work.

## PAN-210481

Fixed an issue where botnet reports were not generated on the firewall.

## PAN-210449

Fixed an issue where the value for shared objects used in policy rules were not displayed on multi-vsys firewalls when pushed from Panorama.

## PAN-210331

Fixed an issue where the firewall did not send device telemetry files to Cortex Data Lake with the error message send the file to CDL receiver failed.

## PAN-210327

```caveat
PA-5200 Series firewalls only
```

Fixed an issue where upgrading to PAN-OS 10.1.7, an internal loop caused an increase in the packets received per second.

## PAN-210237

Fixed an issue where system logs generated by Panorama for commit operations showed the severity as High instead of Informational.

## PAN-210080

Fixed an issue where the useridd process stopped responding when add and delete member parameters in an incremental sync query were empty.

## PAN-209799

Fixed an issue where logging was not disabled on passive nodes, which caused the logrcvr to stop responding.

## PAN-209491

Fixed an issue on the web interface where the Session Expire Time displayed a past date if the device time was in December.

## PAN-209069

Fixed an issue where IP addresses in the X-Forwarded-For (XFF) field were not logged when the IP address contained an associated port number.

## PAN-209036

Fixed an issue where the dataplane restarted, which led to slot failures occurring and a core file being generated.

## PAN-208987

```caveat
PA-5400 Series only
```

Fixed an issue where packets were not transmitted from the firewall if its fragments were received on different slots. This occurred when aggregate ethernet (AE) members in an AE interface were placed on a different slot.

## PAN-208922

A fix was made to address an issue where an authenticated
administrator was able to commit a specifically created
configuration to read local files and resources from the system
(CVE-2023-38046).

## PAN-208930

```caveat
PA-7000 Series firewalls only
```

Fixed an issue where auto-tagging in log forwarding did not work.

## PAN-208902

Fixed an issue where, when a client sent a TCP/FIN packet, the firewall displayed the end reason as aged-out instead of tcp-fin.

## PAN-208724

Fixed an issue where port pause frame settings did not work as expected and incorrect pause frames occurred.

## PAN-208718

Additional debug information was added to capture internal details during traffic congestion.

## PAN-208711

```caveat
PA-5200 Series firewalls only
```

The CLI command debug dataplane set pow no-desched yes/no was added to address an issue where the all_pktproc process stopped responding and caused traffic issues.

## PAN-208537

Fixed an issue where the licensed-device-capacity was reduced when multiple device management license key files were present.

## PAN-208525

Fixed an issue where Security policy rules with user groups did not match when Kerberos authentication was configured for explicit proxy.

## PAN-208485

Fixed an issue where NAT policies were not visible on the CLI if they contained more than 32 characters.

## PAN-208343

Fixed an issue where telemetry regions were not visible on Panorama.

## PAN-208157

Fixed an issue where malformed hints sent from the firewall caused the logd process to stop responding on Panorama, which caused a system reboot into maintenance mode.

## PAN-207940

Fixed an issue where platforms with RAID disk checks were performed weekly, which caused logs to incorrectly state that RAID was rebuilding.

## PAN-207740

Fixed an issue that resulted in a race condition, which caused the configd process to stop responding.

## PAN-207738

Fixed an issue where the ocsp-next-update-time CLI command did not execute for leaf certificates with certificate chains that did not specify OCSP or CRL URLs. As a result, the next update time was 60 minutes even if a different time was set.

## PAN-207663

Fixed a Clientless VPN issue where JSON stringify caused issues with the application rewrite.

## PAN-207629

Fixed an issue where a selective push to firewalls failed if the
firewalls were enabled with multiple vsys and the push scope
contained shared objects in device groups.

## PAN-207610

```caveat
PA-5200 Series and PA-7000 Series firewalls only
```

Fixed an issue where Log Admin Activity was not visible on the web interface.

## PAN-207601

Fixed an issue where URL cloud connections were unable to resolve the proxy server hostname.

## PAN-207426

Fixed an issue where a selective push did not include the Share Unused Address and Service Objects with Devices option on Panorama, which caused the firewall to not receive the objects during the configuration push.

## PAN-207400

Fixed an issue on Octeon based platforms where fragmented VLAN tagged packets dropped on an aggregate interface.

## PAN-207390

Fixed an issue where, even after disabling Telemetry, Telemetry system logs were still generated.

## PAN-207260

A commit option was enabled for Device Group and Template administrators after a password change.

## PAN-207045

```caveat
PA-800 Series firewalls only
```

Fixed an issue where PAN-SFP-SX transceivers used on ports 5 to 8 did not renegotiate with peer ports after a reload.

## PAN-206963

```caveat
M-700 Appliances only
```

A CLI command was added to check the status of each physical port of a bond1 interface.

## PAN-206858

Fixed an issue where a segmentation fault occurred due to the useridd process being restarted.

## PAN-206755

Fixed an issue when a scheduled multi-device group push occurred, the configd process stopped responding, which caused the push to fail.

## PAN-206684

```caveat
PA-7000 Series firewalls with Log Forwarding Cards (LFCs) only
```

Fixed an issue where, after upgrading the firewall from a PAN-OS 10.0 release to a PAN-OS 10.1 release, the firewall did not duplicate logs to local log collectors or to Cortex Data Lake when a device certificate was already installed.

## PAN-206658

Fixed a timeout issue in the Intel ixgbe driver that resulted in internal path monitoring failure.

## PAN-206466

Fixed an issue where the push scope was displaying duplicate shared objects for each device group that were listed under the shared-object group.

## PAN-206393

```caveat
PA-5280 firewalls only
```

Fixed an issue where memory allocation errors caused decryption failures that disrupted traffic with SSL forward proxy enabled.

## PAN-206382

Fixed an issue where authentication sequences were not populated in the drop down when selecting authentication profiles during administrator creation in a template.

## PAN-206251

```caveat
PA-7000 Series firewalls with Log Forwarding Cards (LFCs) only
```

Fixed an issue where the logrcvr process did not send the system-start SNMP trap during startup.

## PAN-206233

Fixed an issue where the pan_comm process stopped responding when a content update and a cloud application update occurred at the same time.

## PAN-206128

```caveat
PA-7000 Series firewalls with NPCs (Network Processing Cards) only
```

Improved debugging capability for an issue where the firewall restarted due to heartbeat failures and then failed with the following error message: Power not OK.

## PAN-206069

Fixed an issue where the firewall was unable to boot up on older Intel CPUs.

## PAN-206017

Fixed an issue where the show dos-protection rule command displayed a character limit error.

## PAN-206005

```caveat
PA-1400 Series, PA-3400 Series, and PA-5440 firewalls only
```

Fixed an issue where the
l7_misc memory pool was undersized
and caused connectivity loss when the limit was reached.

## PAN-205877

```caveat
PA-5450 firewalls only
```

Added debug commands for an issue where a MAC address flap occurred on a neighbor firewall when connecting both MGT-A and MGT-B interfaces.

## PAN-205829

Fixed an issue where logs did not display Host-ID details for GlobalProtect users despite having a quarantine Security policy rule. This occurred due to a missed local cache lookup.

## PAN-205804

Fixed an issue on Panorama where a WildFire scheduled update for managed devices triggered multiple UploadInstall jobs per minute.

## PAN-205729

```caveat
PA-3200 Series and PA-7000 Series firewalls only
```

Fixed an issue where the CPLD watchdog timeout caused the firewall to reboot unexpectedly.

## PAN-205699

Fixed an issue where the cloud plugin configuration was automatically deleted from Panorama after a reboot or a configd process restart.

## PAN-205698

Fixed an issue where GlobalProtect authentication did not work on Apple MacOS devices when the authentication method used was CIE with SAML Authentication.

## PAN-205590

Fixed an issue where the fan tray fault LED light was on even though no alarm was reported in the system environment.

## PAN-205453

Fixed an issue where running reports or queries under a user group caused the reportd process to stop responding.

## PAN-205396

Fixed an issue where SD-WAN adaptive SaaS path monitoring did not work correctly during a next hop link down failure.

## PAN-205260

Fixed an issue where there was an IP address conflict after a reboot due to a transaction ID collision.

## PAN-205255

Fixed a rare issue that caused the dataplane to restart unexpectedly.

## PAN-205231

Fixed an issue where a commit operation remained at 55% for longer than expected if more than 7,500 Security policy rules were configured.

## PAN-205211

Fixed an issue where the reportd process stopped responding while querying logs (Monitor > Logs > <logtype>).

## PAN-205096

Fixed an issue where promoted sessions were not synced with all cluster members in an HA cluster.

## PAN-204749

Fixed an issue where sudden, large bursts of traffic destined for an interface that was down caused packet buffers to fill, which stalled path monitor heartbeat packets.

## PAN-204581

Fixed an issue where, when accessing a web application via the GlobalProtect Clientless VPN, the web application landing page continuously reloaded.

## PAN-204575

```caveat
PA-7000 Series firewalls with Log Forwarding Cards (LFCs) only
```

Fixed an issue where the firewall did not forward logs to the log collector.

## PAN-204572

Fixed an issue where python scripts were not working as expected.

## PAN-204456

Fixed an issue related to the logd process that caused high memory consumption.

## PAN-204335

Fixed an issue where Panorama became unresponsive, and when refreshed, the error 504 Gateway not Reachable was displayed.

## PAN-203964

```caveat
Firewalls in FIPS-CC mode only
```

Fixed an issue where the firewall went into maintenance mode due to downloading a corrupted software image, which resulted in the error message FIPS-CC failure. Image File Authentication Error.

## PAN-203851

Fixed an issue with firewalls in HA configurations where host information profile (HIP) sync did not work between peer firewalls.

## PAN-203681

```caveat
Panorama appliances in FIPS-CC mode only
```

Fixed an issue where a leaf certificate was unable to be imported into a template stack.

## PAN-203663

Fixed an issue where administrators were unable to change the password of a local database for users configured as a local admin user via an authentication profile.

## PAN-203453

Fixed an issue on Panorama where the log query failed due to a high number of User-ID redistribution messages.

## PAN-203430

Fixed an issue where, when the User-ID agent had collector name/secret configured, the configuration was mandatory on clients on PAN-OS 10.0 and later releases.

## PAN-203339

Fixed an issue where services failed due to the RAID rebuild not being completed on time.

## PAN-203147

```caveat
Firewalls in FIPS-CC mode only
```

Fixed an issue where the firewall unexpectedly rebooted when downloading a new PAN-OS software image.

## PAN-203137

```caveat
PA-5450 firewalls only
```

Fixed an issue where HSCI ports did not come up when QSFP DAC cables were used.

## PAN-202543

An enhancement was made to improve path monitor data collection by verifying the status of the control network.

## PAN-202248

Fixed an issue where, due to a tunnel content inspection (TCI) policy match, IPSec traffic did not pass through the firewall when NAT was performed on the traffic.

## PAN-201701

Fixed an issue where the firewall generated system log alerts if the raid for a system or log disk was corrupted.

## PAN-201580

Fixed an issue where the useridd process stopped responding due to an invalid vsys_id request.

## PAN-200845

```caveat
M-600 Appliances in Management-only mode only
```

Fixed an issue where XML API queries failed due to the configuration size being larger than expected.

## PAN-200160

Fixed a memory leak issue on Panorama related to the logd process that caused an out-of-memory (OOM) condition.

## PAN-200116

Fixed an issue where Elasticsearch displayed red due to frequent tunnel check failures between HA clusters.

## PAN-199965

Fixed an issue where the reportd process stopped responding on log collectors during query and report operations due to a race condition between request handling threads.

## PAN-199807

Fixed an issue where the dataplane frequently restarted due to high memory usage on wifclient.

## PAN-196597

Fixed an issue where the dnsproxyd process stopped
responding due to corruption.

## PAN-198306

Fixed an issue where the useridd process stopped responding when booting up the firewall.

## PAN-198266

Fixed an issue where, when predicts for UDP packets were created, a configuration change occurred that triggered a new policy lookup, which caused the dataplane stopped responding when converting the predict. This resulted in a dataplane restart.

## PAN-198038

A CLI command was added to address an issue where long-lived sessions were aging out even when there was ongoing traffic.

## PAN-197872

Fixed an issue where the useridd process generated false positive critical errors.

## PAN-197298

Fixed an issue where the audit comment archive for Security rule changes output had overlapping formats.

## PAN-196410

Fixed an issue where you were unable to customize the risk value in Risk-of-app.

## PAN-195756

Fixed an issue that caused an API request timeout when parsing requests using large header buffers.

## PAN-194805

Fixed an issue where scheduled configuration backups to the SCP
server failed with error message No ECDSA host key is
known.

## PAN-194068

```caveat
PA-5200 Series firewalls only
```

Fixed an issue where the firewall unexpectedly rebooted with the log message Heartbeat failed previously.

## PAN-192513

Fixed an issue where log migration did not work when converting a Legacy mode Panorama appliance to Log Collector mode.

## PAN-192282

```caveat
PA-415 and PA-445 firewalls only
```

Fixed an issue where, in
1G mode, the MGT and Ethernet 1/1 port LEDs incorrectly displayed as
amber instead of green.

## PAN-191222

Fixed an issue where Panorama became inaccessible when after a push to the collector group.

## PAN-190502

Fixed an issue where the Policy filter and Policy optimizer filter were required to have the exact same syntax, including nested conditions with rules that contained more than one tag when filtering via the neq operator.

## PAN-189335

Fixed an issue where the varrcvr process restarted repeatedly, which caused the firewall to restart.

## PAN-189200

Fixed an issue where sinkholes did not occur for AWS Gateway Load Balancer dig queries.

## PAN-186412

Fixed an issue where invalid packet-ptr was seen in work entries.

## PAN-186270

Fixed an issue where, when HA was enabled and a dynamic update schedule was configured, the configd process unexpectedly stopped responding during configuration commits.

## PAN-183375

Fixed an issue where traffic arriving on a tunnel with a bad IP address header checksum was not dropped.

## PAN-180948

Fixed an issue where an external dynamic list fetch failed with the error message Unable to fetch external dynamic list. Couldn't resolve host name. Using old copy for refresh.

## PAN-179174

Fixed an issue where exported PDF report of the ACC was the incorrect color after upgrading from a PAN-OS 10.1 or later release.

## PAN-178594

Fixed an issue where the descriptions of options under the set syslogng ssl-conn-validation CLI command were not accurate.

## PAN-175142

Fixed an issue on Panorama where executing a debug command caused the logrcvr process to stop responding.

## PAN-170414

Fixed an issue related to an OOM condition in the dataplane, which was caused by multiple panio commands using extra memory.
