---
type: Addressed
product: PAN-OS
version: 9.0.8
---

## PAN-140575

Fixed an issue where a process (masterd) did not restart another process (logrcvr) on the Log Forwarding Card (LFC) after the process (logrcvr) crashed.

## PAN-140509

Fixed an issue where performing private data resets during custom Amazon Machine Image (AMI) creation removed CloudWatch directories and caused the CloudWatch plugin to fail.

## PAN-140270

Added additional debugging to periodically collect the debug dataplane internal pdt bcm counters graphical CLI command's output in the Tech Support File (TSF).

## PAN-140043

```caveat
PA-7050 firewalls running on PA-7000 100G NPCs only
```

Fixed an issue where the PA-7000 100G NPC Native Implemented Function (NIF) initialization took longer than expected, which caused internal path monitoring failure and sent the firewall into a non-functional state while rebooting.

## PAN-139555

Fixed an issue where after upgrading the passive firewall, the outer UDP sessions synced from the active firewall did not retain the rule information and after failover, GPRS tunneling protocol (GTP) inspection did not work.

## PAN-137673

Fixed an issue where a memory leak associated with a process (devsrvr) caused an out-of-memory (OOM) condition on the firewall.

## PAN-136765

Fixed an issue where an FQDN update that resolved to the same IP address of another FQDN across different policies caused the other FQDN to be deleted due to missing FQDN aggregation.

## PAN-136612

Fixed an issue where fragmented packets leaked, which caused the depletion of Work Query Entry (WQE) pools.

## PAN-136470

Fixed an issue where a process (all_pktproc) restarted while processing packets with 0.0.0.0 and destination protocol 251 that internally mapped to GTP-C traffic, which caused the dataplane to restart.

## PAN-136173

Fixed an issue where dataplane interfaces remained down after active firewall bootup or a high availability (HA) failover.

## PAN-135909

Fixed an issue where connections to the web interface were abruptly interrupted due to a double free condition (gPanUiPhpGlobal_secure_config_reset), which led to unexpected process restarts.

## PAN-134571

Fixed an issue where DNS security incorrectly set bits to zero on compressed DNS packets, which caused DNS malformation.

## PAN-134547

Fixed an issue where the passive firewall in an active/passive HA configuration deleted BGP-learned routes synchronized from the active firewall if the BGP configuration included the redistribution of the learned routes.

## PAN-134546

Fixed a rare issue on the firewall where a process (flow_mgmt) restarted due to an invalid packet received through the GlobalProtect agent or clientless VPN.

## PAN-134431

Fixed an issue with Security Assertion Markup Language (SAML) authentication where the firewall used old authd_id values, which resulted in failed authentication.

## PAN-133289

Fixed an issue where improper parsing of the URL database caused high device-server CPU usage.

## PAN-132898

Fixed an intermittent issue where logs were missing with log_index debug messages due to merging of the index.

## PAN-132651

Fixed an issue where packet buffer use was at 99% and tunnel monitoring failed, which caused tunnel flaps and LDAP authentication failures.

## PAN-131922

Fixed an issue where the certificate was not automatically pushed to the firewall until you manually fetched the certificate from the firewall.

## PAN-131517

Fixed an issue with a memory corruption error that caused a process (all_pktproc) to restart.

## PAN-130750

Fixed an issue where commit failed on the firewall after disabling **Pre-Defined Reports** from Panorama.

## PAN-129328

Fixed an issue where packet descriptor (on-chip) usage reached 100% even though buffers, throughput, and session counts were not elevated.

## PAN-129289

Fixed an issue where export failed for a large running-config.xml file using the XML API.

## PAN-128568

Fixed a rare issue on the firewalls where a process (pan_task) restarted due to NULL pointer exception.

## PAN-128330

Fixed an issue where the response for the XML API call for the show object registered-ip all operational CLI command included extra appended content.

## PAN-128195

Fixed an issue on Panorama where processes (vld) ran on high CPU when the incoming system log rate was 0.

## PAN-127614

Fixed an issue where SNMPv3 monitoring of the firewall failed from the Zabbix server after a firewall reboot or SNMP daemon restart on the firewall.

## PAN-127358

Fixed an issue with a memory leak in a process (configd) where virtual memory exceeded the limit, which caused the process to restart.

## PAN-127318

Fixed an issue where the firewall intermittently dropped DNS A or AAAA queries received over IPSec tunnels due to a session installation failure.

## PAN-127004

Fixed an issue where a process (sysd) restarted due to missing heartbeats.

## PAN-126205

Fixed an issue where role-based administrators were unable to import certificate private keys onto firewalls.

## PAN-126069

Fixed an issue in Panorama where logs couldn't be viewed when an additional log collector was configured in the existing log collector group.

## PAN-125934

Fixed an issue on Panorama where a commit failed when bootstrapping a firewall to a configuration with a serial number of "unknown." The commit failed with the following error message: mgt-config -> devices -> unknown unknown is invalid.

## PAN-125794

Fixed an issue where a role-based administrator with CLI access was not able to successfully execute the commit-partial CLI command to commit only changes made by themselves.

## PAN-125730

Fixed an issue where packets tagged with IP protocol 252 were incorrectly treated as GPRS tunneling protocol (GTP) traffic, which caused the packet processor to terminate.

## PAN-125534

```caveat
PA-5200 Series and PA-7000 Series firewalls only
```

Fixed an issue where firewalls experienced high packet descriptor (on-chip) usage during uploads to the WildFire Cloud or WF-500 appliance.

## PAN-125410

Fixed an issue where a new GPRS tunneling protocol version 2 control plane (GTPv2-C) session reused GTP-C tunnel parameters within two seconds after deleting the old GTP-C session, which caused a session conflict on the firewall.

## PAN-124893

Fixed an issue where a race condition caused the FIB entry list to form a circle, which in turn caused a process (mprelay) to infinitely loop.

## PAN-124039

A fix was made to address an issue where the GlobalProtect Portal feature in PAN-OS did not set a new session identifier after a successful user login ([CVE-2020-1993](https://security.paloaltonetworks.com/CVE-2020-1993)).

## PAN-123637

```caveat
PA-3200 Series firewalls only
```

Fixed an issue where configuring 1G small form-factor pluggable (SFP) ports on a firewall with forced speed mode (of 1G) enabled made the link unusable when forced speed mode (of 1G) was also enabled on the peer firewall.

## PAN-122408

```caveat
PA-7000b Series firewalls with LFC cards only
```

Fixed an issue where the system logs would continuously report a failure to connect to the proxy for WildFire even when the connectivity was working properly.

## PAN-119806

Fixed an issue in an HA configuration where the dataplane restarted due to internal packet path monitoring failure on the passive firewall.

## PAN-116480

Fixed an issue in Panorama where the show system search-engine-quota CLI command, the show log-collector serial-number <log-collector_SN> CLI command, and **Statistics** (**Panorama > Managed Collectors > Statistics**) showed incorrect log retention data.

## PAN-111611

Fixed an issue where the connection between the firewall and Cortex Data Lake flapped if connections decreased.

## PAN-88136

Fixed a rare issue where a URL update caused the dataplane to restart.
