aaron.axvig/firewallissues
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Caveats restored

Browse Source
This commit is contained in:
aaron.axvig
2026-03-20 09:46:39 -05:00
parent c16ba4bc40
commit 658b07089d
4 changed files with 44 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/generate-rendered-fixtures.mjs
+1 -1
View File
@@ -20,7 +20,7 @@ globalThis.fetch = () => Promise.resolve({
const { parseMarkdownIssues, markdownSummaryToHtml } = await import('../web/js/issues.js');
const __dirname = fileURLToPath(new URL('.', import.meta.url));
const fixturesDir = join(__dirname, 'fixtures');
const fixturesDir = join(__dirname, '../test/fixtures');
const fixtures = readdirSync(fixturesDir).filter(name => {
const contents = readdirSync(join(fixturesDir, name)).map(d => d);
test/fixtures/PAN-OS-11.1.13-h3-addressed/expected-parsed.json
Vendored
+14 -14
View File
@@ -3,8 +3,8 @@
"id": "PAN-316911",
"summary": "Fixed an issue where a newly bootstrapped firewall required a management server restart, relicensing, or license push from Panorama to invoke the device certificate.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where a newly bootstrapped firewall required a management server restart, relicensing, or license push from Panorama to invoke the device certificate.</p>\n"
"caveat": "VM-Series firewalls on Amazon Web Services (AWS) environments only",
"renderedHtml": "<div><em>Caveat: VM-Series firewalls on Amazon Web Services (AWS) environments only</em></div><p>Fixed an issue where a newly bootstrapped firewall required a management server restart, relicensing, or license push from Panorama to invoke the device certificate.</p>\n"
},
{
"id": "PAN-315176",
@@ -24,8 +24,8 @@
"id": "PAN-313850",
"summary": "Fixed an issue where a split-brain condition occurred and HA1/HA2 links went down while upgrading when the HA configuration used dataplane interfaces for HA1 and a combination of HSCI and Ethernet interfaces for HA2.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where a split-brain condition occurred and HA1/HA2 links went down while upgrading when the HA configuration used dataplane interfaces for HA1 and a combination of HSCI and Ethernet interfaces for HA2.</p>\n"
"caveat": "PA-1400 Series firewalls in HA configurations only",
"renderedHtml": "<div><em>Caveat: PA-1400 Series firewalls in HA configurations only</em></div><p>Fixed an issue where a split-brain condition occurred and HA1/HA2 links went down while upgrading when the HA configuration used dataplane interfaces for HA1 and a combination of HSCI and Ethernet interfaces for HA2.</p>\n"
},
{
"id": "PAN-313623",
@@ -38,15 +38,15 @@
"id": "PAN-311285",
"summary": "Fixed an issue where a memory leak occurred related to the ospfd process, which caused RAM usage to continuously increase on active devices in an HA cluster until the device stopped responding, even after an HA failover.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where a memory leak occurred related to the ospfd process, which caused RAM usage to continuously increase on active devices in an HA cluster until the device stopped responding, even after an HA failover.</p>\n"
"caveat": "Firewalls in HA conditions only",
"renderedHtml": "<div><em>Caveat: Firewalls in HA conditions only</em></div><p>Fixed an issue where a memory leak occurred related to the ospfd process, which caused RAM usage to continuously increase on active devices in an HA cluster until the device stopped responding, even after an HA failover.</p>\n"
},
{
"id": "PAN-308507",
"summary": "Fixed an issue where the firewall intermittently failed to maintain active log forwarding streams to Cortex Data Lake even when duplicate logging and enhanced application logging were enabled.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where the firewall intermittently failed to maintain active log forwarding streams to Cortex Data Lake even when duplicate logging and enhanced application logging were enabled.</p>\n"
"caveat": "Panorama managed firewalls only",
"renderedHtml": "<div><em>Caveat: Panorama managed firewalls only</em></div><p>Fixed an issue where the firewall intermittently failed to maintain active log forwarding streams to Cortex Data Lake even when duplicate logging and enhanced application logging were enabled.</p>\n"
},
{
"id": "PAN-309300",
@@ -59,8 +59,8 @@
"id": "PAN-302654",
"summary": "Fixed an issue where, when the HA configuration had multiple logical routers, static or connected routes redistributed into OSPF aged out in the LSDB, which caused the routes to be removed on peer OSPF neighbors.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where, when the HA configuration had multiple logical routers, static or connected routes redistributed into OSPF aged out in the LSDB, which caused the routes to be removed on peer OSPF neighbors.</p>\n"
"caveat": "Firewalls in active/passive HA configurations only",
"renderedHtml": "<div><em>Caveat: Firewalls in active/passive HA configurations only</em></div><p>Fixed an issue where, when the HA configuration had multiple logical routers, static or connected routes redistributed into OSPF aged out in the LSDB, which caused the routes to be removed on peer OSPF neighbors.</p>\n"
},
{
"id": "PAN-300423",
@@ -80,14 +80,14 @@
"id": "PAN-296202",
"summary": "Added a log enhancement to capture an issue where, when a commit operation was in progress, newly deployed IP address tags that used the XML API were not immediately reflected in address group resolution, which delayed IP address mapping to address groups and caused traffic to be incorrectly allowed or denied.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Added a log enhancement to capture an issue where, when a commit operation was in progress, newly deployed IP address tags that used the XML API were not immediately reflected in address group resolution, which delayed IP address mapping to address groups and caused traffic to be incorrectly allowed or denied.</p>\n"
"caveat": "Firewalls in active/active HA configurations only",
"renderedHtml": "<div><em>Caveat: Firewalls in active/active HA configurations only</em></div><p>Added a log enhancement to capture an issue where, when a commit operation was in progress, newly deployed IP address tags that used the XML API were not immediately reflected in address group resolution, which delayed IP address mapping to address groups and caused traffic to be incorrectly allowed or denied.</p>\n"
},
{
"id": "PAN-273158",
"summary": "Fixed an issue where an incorrect ASIC configuration caused silent packet drops or application slowness when receiving a mix of jumbo and non-jumbo packets.",
"resolved": "",
"caveat": "",
"renderedHtml": "<p>Fixed an issue where an incorrect ASIC configuration caused silent packet drops or application slowness when receiving a mix of jumbo and non-jumbo packets.</p>\n"
"caveat": "PA-7000 Series firewalls only",
"renderedHtml": "<div><em>Caveat: PA-7000 Series firewalls only</em></div><p>Fixed an issue where an incorrect ASIC configuration caused silent packet drops or application slowness when receiving a mix of jumbo and non-jumbo packets.</p>\n"
}
]
test/fixtures/PAN-OS-11.1.13-h3-addressed/expected.md
Vendored
+28
View File
@@ -6,6 +6,10 @@ version: 11.1.13-h3
## PAN-316911
```caveat
VM-Series firewalls on Amazon Web Services (AWS) environments only
```
Fixed an issue where a newly bootstrapped firewall required a management server restart, relicensing, or license push from Panorama to invoke the device certificate.
## PAN-315176
@@ -18,6 +22,10 @@ Fixed an issue where traffic was disrupted during IPSec rekey operations due to
## PAN-313850
```caveat
PA-1400 Series firewalls in HA configurations only
```
Fixed an issue where a split-brain condition occurred and HA1/HA2 links went down while upgrading when the HA configuration used dataplane interfaces for HA1 and a combination of HSCI and Ethernet interfaces for HA2.
## PAN-313623
@@ -26,10 +34,18 @@ Fixed an issue where the /opt/pancfg/mgmt/ssl/private/ directory on Palo Alto Ne
## PAN-311285
```caveat
Firewalls in HA conditions only
```
Fixed an issue where a memory leak occurred related to the ospfd process, which caused RAM usage to continuously increase on active devices in an HA cluster until the device stopped responding, even after an HA failover.
## PAN-308507
```caveat
Panorama managed firewalls only
```
Fixed an issue where the firewall intermittently failed to maintain active log forwarding streams to Cortex Data Lake even when duplicate logging and enhanced application logging were enabled.
## PAN-309300
@@ -38,6 +54,10 @@ Fixed an issue where management plane system resources configuration size exceed
## PAN-302654
```caveat
Firewalls in active/passive HA configurations only
```
Fixed an issue where, when the HA configuration had multiple logical routers, static or connected routes redistributed into OSPF aged out in the LSDB, which caused the routes to be removed on peer OSPF neighbors.
## PAN-300423
@@ -50,8 +70,16 @@ Optimized the commit workflow to reduce the size of the effective configuration,
## PAN-296202
```caveat
Firewalls in active/active HA configurations only
```
Added a log enhancement to capture an issue where, when a commit operation was in progress, newly deployed IP address tags that used the XML API were not immediately reflected in address group resolution, which delayed IP address mapping to address groups and caused traffic to be incorrectly allowed or denied.
## PAN-273158
```caveat
PA-7000 Series firewalls only
```
Fixed an issue where an incorrect ASIC configuration caused silent packet drops or application slowness when receiving a mix of jumbo and non-jumbo packets.
web/js/process.js
+1 -1
View File
@@ -109,7 +109,7 @@ export function parseIssuesFromHtmlTable(htmlText, options = {}) {
const issues = [];
const parsedType = normalizeWhitespace(String(options.type || '')).toLowerCase();
const includeDescriptionCaveats = parsedType !== 'addressed';
const includeDescriptionCaveats = true;
const includeInlineCodeFormatting = parsedType !== 'addressed';
rows.forEach(row => {