aaron.axvig/firewallissues
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update PAN-OS 11.1 files

Browse Source
This commit is contained in:
aaron.axvig
2026-04-15 14:57:19 -05:00
parent 8a243e3d9c
commit 10f549ef2a
84 changed files with 3207 additions and 3509 deletions
Download Patch File Download Diff File Expand all files Collapse all files
web/data/issues/PAN-OS/addressed/11.1.4-h17.md
+24 -67
View File
@@ -6,38 +6,27 @@ version: 11.1.4-h17
## PAN-282022
Fixed the support limitation for the Panorama M-600 and M-700
appliances.
Fixed the support limitation for the Panorama M-600 and M-700 appliances.
## PAN-281885
Fixed an issue where, when exporting and importing CSV files, the
hash values of pre-shared key variables set at template and template
stack levels changed inconsistently, which resulted in both
variables displaying the same hash value.
Fixed an issue where, when exporting and importing CSV files, the hash values of pre-shared key variables set at template and template stack levels changed inconsistently, which resulted in both variables displaying the same hash value.
## PAN-280505
Fixed an issue where the web interface did not display a message to
commit prior changes before attempting a partial configuration load.
Fixed an issue where the web interface did not display a message to commit prior changes before attempting a partial configuration load.
## PAN-280243
Fixed an issue where the firewall lost the pre-shared key
configuration assigned from a PSK variable when an unrelated device
group configuration was loaded.
Fixed an issue where the firewall lost the pre-shared key configuration assigned from a PSK variable when an unrelated device group configuration was loaded.
## PAN-279336
Fixed an issue where the CLI did not display a message to commit
prior changes before loading a partial configuration.
Fixed an issue where the CLI did not display a message to commit prior changes before loading a partial configuration.
## PAN-279176
Fixed an issue where the configuration audit displayed inaccurate
information after partially loading the configuration via the CLI,
which caused the audit to flag the configuration as deleted or
changed.
Fixed an issue where the configuration audit displayed inaccurate information after partially loading the configuration via the CLI, which caused the audit to flag the configuration as deleted or changed.
## PAN-277762
@@ -45,47 +34,31 @@ changed.
VM-Series firewalls only
```
Fixed an issue where unexpected
failovers occurred on firewalls running PAN-OS 11.2.2-h2.
Fixed an issue where unexpected failovers occurred on firewalls running PAN-OS 11.2.2-h2.
## PAN-275713
Fixed an issue where the dscd process stopped responding
when Endpoint Serial Number was enabled,
which resulted in the Active Directory
returning a list of serial numbers for a specific firewall from the
Cloud Identity Engine.
Fixed an issue where the dscd process stopped responding when **Endpoint Serial Number** was enabled, which resulted in the **Active Directory** returning a list of serial numbers for a specific firewall from the Cloud Identity Engine.
## PAN-275077
Fixed an issue where DNS Security intermittently logs malicious
domain URLs as Alert instead of taking a Sinkhole action, even when
configured to Sinkhole malicious DNS domains.
Fixed an issue where DNS Security intermittently logs malicious domain URLs as Alert instead of taking a Sinkhole action, even when configured to Sinkhole malicious DNS domains.
## PAN-274750
Fixed an issue where the detailed log view in Panorama did not
display all packet details for traffic logs received from the cloud.
Fixed an issue where the detailed log view in Panorama did not display all packet details for traffic logs received from the cloud.
## PAN-273694
Fixed an issue where the firewall rebooted due to an out-of-bounds
memory access that occurred as a result of the SIP content length
value being split across packets.
Fixed an issue where the firewall rebooted due to an out-of-bounds memory access that occurred as a result of the SIP content length value being split across packets.
## PAN-272538
Fixed an issue where the configd process stopped
responding during a commit-all validation when there were
uncommitted changes and
share-unused-objects-with-devices
was set to off.
Fixed an issue where the configd process stopped responding during a commit-all validation when there were uncommitted changes and share-unused-objects-with-devices was set to off.
## PAN-272171
Fixed an issue where the firewall dropped the AAAA DNS server
response and caused delays in traffic from Ubuntu or Linux clients
when DNS Security was enabled.
Fixed an issue where the firewall dropped the AAAA DNS server response and caused delays in traffic from Ubuntu or Linux clients when DNS Security was enabled.
## PAN-270607
@@ -93,13 +66,11 @@ when DNS Security was enabled.
Firewalls in active/passive HA configurations only
```
Fixed
an issue where OSPF failed to establish after a failover from the
active firewall to the passive firewall.
Fixed an issue where OSPF failed to establish after a failover from the active firewall to the passive firewall.
## PAN-271351
A fix was made to address CVE-2025-0116.
A fix was made to address [CVE-2025-0116](https://security.paloaltonetworks.com/CVE-2025-0116).
## PAN-267091
@@ -107,50 +78,36 @@ Fixed an issue on Panorama where Elasticsearch repeatedly restarted.
## PAN-264678
Fixed an issue where Preview Changes did not
display configuration changes in Commit and push > Push
Scope.
Fixed an issue where **Preview Changes** did not display configuration changes in **Commit and push > Push Scope**.
## PAN-262511
Fixed an issue on firewalls in HA configurations where OSPF neighbors
were not established after an HA failover.
Fixed an issue on firewalls in HA configurations where OSPF neighbors were not established after an HA failover.
## PAN-261825
Fixed an issue where traffic was dropped when Data Loss Prevention or
Advanced URL Filtering were enabled. This occurred when the payload
size was greater than 3.5 KB.
Fixed an issue where traffic was dropped when Data Loss Prevention or Advanced URL Filtering were enabled. This occurred when the payload size was greater than 3.5 KB.
## PAN-259706
Fixed an issue on Panorama where the web interface was slower than
expected or unresponsive when monitoring definitions were added in
the Kubernetes plugin.
Fixed an issue on Panorama where the web interface was slower than expected or unresponsive when monitoring definitions were added in the Kubernetes plugin.
## PAN-257183
Fixed an issue where the firewall dropped DNS traffic when using DNS
Security.
Fixed an issue where the firewall dropped DNS traffic when using DNS Security.
## PAN-254174
A fix was made to address CVE-2025-0115.
A fix was made to address [CVE-2025-0115](https://security.paloaltonetworks.com/CVE-2025-0115).
## PAN-248762
Fixed an issue where, when the Advanced Routing Engine was configured
with OSPF, the firewall stopped responding when attempting to
connect to the neighbor while exchanging route maps.
Fixed an issue where, when the Advanced Routing Engine was configured with OSPF, the firewall stopped responding when attempting to connect to the neighbor while exchanging route maps.
## PAN-239201
Fixed an issue where partial commit or partial validation operations
failed for non-super user administrators with the error
<device-group-name> is invalid. meta data not
found for dg <device-group-name>.
Fixed an issue where partial commit or partial validation operations failed for non-super user administrators with the error <device-group-name> is invalid. meta data not found for dg <device-group-name>.
## PAN-235733
Fixed an issue where the displayed NTP information was incorrect if
the DNS servers timed out.
Fixed an issue where the displayed NTP information was incorrect if the DNS servers timed out.