---
type: Addressed
product: PAN-OS
version: 9.1.13
---

## WF500-5513

Fixed an issue where cloud queries failed, which generated system logs. The issue occurred because a hash was not found in the cloud.

## PAN-184445

Fixed an issue where, after upgrading Panorama, when **Share Unused Address and Service Objects with Devices** was unchecked, address objects using tags to dynamic address groups were removed after a full commit.

## PAN-181802

Fixed an issue where a memory utilization condition resulted in the web interface responding more slowly than expected and management server restarting.

## PAN-181309

Fixed an issue where Panorama was inaccessible due to the configd process not responding.

## PAN-180338

Fixed an issue where the CTD loop count wasn't accurately incremented.

## PAN-179274

Fixed an issue on high availability configurations where, after upgrading to PAN-OS 9.1.10, PAN-OS 10.0.6, or PAN-OS 10.1.0, the high availability (HA1) and HA1-Backup link stayed down. This issue occurred when the peer firewall IP address was in a different subnet.

## PAN-179164

Fixed an issue where a web-proxy port number was added to the destination URL when captive portal authentication was run.

## PAN-177907

Fixed an issue where, after rebooting the firewall, FQDN address objects referred in rules in a virtual system (vsys) did not resolve when the vsys used a custom DNS proxy.

## PAN-177626

Fixed an issue where aggressive situations caused on-chip descriptor exhaustion.

## PAN-177551

A fix was made to address a vulnerability that enabled an authenticated network-based administrator to upload a specifically created configuration that disrupted system processes and was able to execute arbitrary code with root privileges when the configuration was committed ([CVE-2022-0024](https://security.paloaltonetworks.com/CVE-2022-0024)).

## PAN-176054

Fixed an intermittent issue where users did not have access to resources due to a host information profile (HIP) check failure that was caused by the HIP data not being synced between the management plane and the dataplane.

## PAN-175628

```caveat
PA-5200 Series firewalls only
```

Fixed an issue where the firewall was unable to monitor AUX1 and AUX2 interfaces through SNMP.

## PAN-175211

Fixed a memory leak issue in the (mgmtsrvr) process.

## PAN-174781

Fixed an issue where the firewall did not send an SMTP 541 error message to the email client after detecting a malicious file attachment.

## PAN-174709

Fixed an out-of-memory (OOM) condition that occurred due to multiple parallel jobs being created by the scheduled log export feature.

## PAN-174244

Fixed an issue where a sudden increase in URL data approached the maximum cache capacity of the firewall.

## PAN-173469

Fixed an intermittent issue where websites were blocked and categorized as not resolved.

## PAN-173373

```caveat
VM-Series firewalls in NSX-T deployments only
```

Fixed an issue where deployments dropped packets with the counter pan_netx_send_pkt error.

## PAN-172837

Fixed an intermittent issue where the firewall didn't generate block URL logs for URLs even though the websites were blocked in the client device.

## PAN-172295

Fixed an issue where a HIP database cache loop caused high CPU utilization on a process (useridd) and caused IP address-to-user mapping redistribution failure.

## PAN-172243

Fixed an issue where NetFlow traffic triggered a packet buffer leak.

## PAN-172056

```caveat
VM-Series firewalls only
```

The logging rate limit was improved to prevent log loss.

## PAN-170997

Fixed an issue where FQDN service routes were not installed after a system reboot.

## PAN-170952

Fixed script issues that caused diagnostic data to not be collected after path monitor failure.

## PAN-169212

Fixed an issue where information level logs caused configd logs to fill.

## PAN-168452

Fixed an issue where DNS signatures did not trigger.

## PAN-168400

Fixed an issue where, after installing Cloud Services plugin 2.0, the **Plugin cloud_services** status (**Dashboard > High Availability**) displayed as **Mismatch**.

## PAN-163030

Fixed an issue where restarting the devsrvr process caused new GlobalProtect connections to fail with the error message required client certificate not found. This issue occurred due to a key mismatch between the dataplane and the management plane.

## PAN-161297

Fixed an interoperability issue with other vendors when IKEv2 used SHA2-based certificate authentication.

## PAN-160419

Fixed an issue where the following error message displayed in the system log after restarting the firewall: dns-signature initialization from file storage failed, start with empty cache.

## PAN-159295

Fixed an issue where scheduled configuration export files saved in the /tmp folder weren't periodically purged, which caused the root partition to fill up.

## PAN-159214

Fixed an issue where a .txt file was corrupted, which caused the web interface to not display the requested information.

## PAN-159210

Fixed an issue where timed-out DNS Security queries produced incorrect system log entries indicating cloud service connection refused. With this fix, timed-out queries are correctly logged as cloud query timeout.

## PAN-158541

Fixed an OOM condition on the dataplane on FIPS-mode firewall decryption that used DHE ciphers.

## PAN-158280

Fixed an issue where SMB sessions were discarded with the following error message: ctd out of resource.

## PAN-153019

Fixed an issue where the following error message appeared: Error: pan_tdb_load_sml_dfa_serialize(pan_tdb_ser.c:2424): pan_util_file_to_buf /opt/pancfg/mgmt/content//cache/common//sml_dfa.cache.ser error, even though the cache file got regenerated if it was missing.

## PAN-151749

Fixed an issue where Panorama did not show warnings of the last commit job.

## PAN-146734

Fixed an issue where, when a Panorama-pushed configuration was referenced in a local configuration, commits failed after updating the master key on the firewall, which resulted in the following error message: Invalid candidate configuration. Master key change aborted....

## PAN-145833

```caveat
PA-3200 Series firewalls only
```

Fixed an issue where the firewall stopped recording dataplane diagnostic data in dp-monitor.log after a few hours of uptime.
