Add PAN-OS 9.1 issues
This commit is contained in:
@@ -0,0 +1,177 @@
|
||||
---
|
||||
type: Addressed
|
||||
product: PAN-OS
|
||||
version: 9.1.13
|
||||
---
|
||||
|
||||
## WF500-5513
|
||||
|
||||
Fixed an issue where cloud queries failed, which generated system logs. The issue occurred because a hash was not found in the cloud.
|
||||
|
||||
## PAN-184445
|
||||
|
||||
Fixed an issue where, after upgrading Panorama, when **Share Unused Address and Service Objects with Devices** was unchecked, address objects using tags to dynamic address groups were removed after a full commit.
|
||||
|
||||
## PAN-181802
|
||||
|
||||
Fixed an issue where a memory utilization condition resulted in the web interface responding more slowly than expected and management server restarting.
|
||||
|
||||
## PAN-181309
|
||||
|
||||
Fixed an issue where Panorama was inaccessible due to the configd process not responding.
|
||||
|
||||
## PAN-180338
|
||||
|
||||
Fixed an issue where the CTD loop count wasn't accurately incremented.
|
||||
|
||||
## PAN-179274
|
||||
|
||||
Fixed an issue on high availability configurations where, after upgrading to PAN-OS 9.1.10, PAN-OS 10.0.6, or PAN-OS 10.1.0, the high availability (HA1) and HA1-Backup link stayed down. This issue occurred when the peer firewall IP address was in a different subnet.
|
||||
|
||||
## PAN-179164
|
||||
|
||||
Fixed an issue where a web-proxy port number was added to the destination URL when captive portal authentication was run.
|
||||
|
||||
## PAN-177907
|
||||
|
||||
Fixed an issue where, after rebooting the firewall, FQDN address objects referred in rules in a virtual system (vsys) did not resolve when the vsys used a custom DNS proxy.
|
||||
|
||||
## PAN-177626
|
||||
|
||||
Fixed an issue where aggressive situations caused on-chip descriptor exhaustion.
|
||||
|
||||
## PAN-177551
|
||||
|
||||
A fix was made to address a vulnerability that enabled an authenticated network-based administrator to upload a specifically created configuration that disrupted system processes and was able to execute arbitrary code with root privileges when the configuration was committed ([CVE-2022-0024](https://security.paloaltonetworks.com/CVE-2022-0024)).
|
||||
|
||||
## PAN-176054
|
||||
|
||||
Fixed an intermittent issue where users did not have access to resources due to a host information profile (HIP) check failure that was caused by the HIP data not being synced between the management plane and the dataplane.
|
||||
|
||||
## PAN-175628
|
||||
|
||||
```caveat
|
||||
PA-5200 Series firewalls only
|
||||
```
|
||||
|
||||
Fixed an issue where the firewall was unable to monitor AUX1 and AUX2 interfaces through SNMP.
|
||||
|
||||
## PAN-175211
|
||||
|
||||
Fixed a memory leak issue in the (mgmtsrvr) process.
|
||||
|
||||
## PAN-174781
|
||||
|
||||
Fixed an issue where the firewall did not send an SMTP 541 error message to the email client after detecting a malicious file attachment.
|
||||
|
||||
## PAN-174709
|
||||
|
||||
Fixed an out-of-memory (OOM) condition that occurred due to multiple parallel jobs being created by the scheduled log export feature.
|
||||
|
||||
## PAN-174244
|
||||
|
||||
Fixed an issue where a sudden increase in URL data approached the maximum cache capacity of the firewall.
|
||||
|
||||
## PAN-173469
|
||||
|
||||
Fixed an intermittent issue where websites were blocked and categorized as not resolved.
|
||||
|
||||
## PAN-173373
|
||||
|
||||
```caveat
|
||||
VM-Series firewalls in NSX-T deployments only
|
||||
```
|
||||
|
||||
Fixed an issue where deployments dropped packets with the counter pan_netx_send_pkt error.
|
||||
|
||||
## PAN-172837
|
||||
|
||||
Fixed an intermittent issue where the firewall didn't generate block URL logs for URLs even though the websites were blocked in the client device.
|
||||
|
||||
## PAN-172295
|
||||
|
||||
Fixed an issue where a HIP database cache loop caused high CPU utilization on a process (useridd) and caused IP address-to-user mapping redistribution failure.
|
||||
|
||||
## PAN-172243
|
||||
|
||||
Fixed an issue where NetFlow traffic triggered a packet buffer leak.
|
||||
|
||||
## PAN-172056
|
||||
|
||||
```caveat
|
||||
VM-Series firewalls only
|
||||
```
|
||||
|
||||
The logging rate limit was improved to prevent log loss.
|
||||
|
||||
## PAN-170997
|
||||
|
||||
Fixed an issue where FQDN service routes were not installed after a system reboot.
|
||||
|
||||
## PAN-170952
|
||||
|
||||
Fixed script issues that caused diagnostic data to not be collected after path monitor failure.
|
||||
|
||||
## PAN-169212
|
||||
|
||||
Fixed an issue where information level logs caused configd logs to fill.
|
||||
|
||||
## PAN-168452
|
||||
|
||||
Fixed an issue where DNS signatures did not trigger.
|
||||
|
||||
## PAN-168400
|
||||
|
||||
Fixed an issue where, after installing Cloud Services plugin 2.0, the **Plugin cloud_services** status (**Dashboard > High Availability**) displayed as **Mismatch**.
|
||||
|
||||
## PAN-163030
|
||||
|
||||
Fixed an issue where restarting the devsrvr process caused new GlobalProtect connections to fail with the error message required client certificate not found. This issue occurred due to a key mismatch between the dataplane and the management plane.
|
||||
|
||||
## PAN-161297
|
||||
|
||||
Fixed an interoperability issue with other vendors when IKEv2 used SHA2-based certificate authentication.
|
||||
|
||||
## PAN-160419
|
||||
|
||||
Fixed an issue where the following error message displayed in the system log after restarting the firewall: dns-signature initialization from file storage failed, start with empty cache.
|
||||
|
||||
## PAN-159295
|
||||
|
||||
Fixed an issue where scheduled configuration export files saved in the /tmp folder weren't periodically purged, which caused the root partition to fill up.
|
||||
|
||||
## PAN-159214
|
||||
|
||||
Fixed an issue where a .txt file was corrupted, which caused the web interface to not display the requested information.
|
||||
|
||||
## PAN-159210
|
||||
|
||||
Fixed an issue where timed-out DNS Security queries produced incorrect system log entries indicating cloud service connection refused. With this fix, timed-out queries are correctly logged as cloud query timeout.
|
||||
|
||||
## PAN-158541
|
||||
|
||||
Fixed an OOM condition on the dataplane on FIPS-mode firewall decryption that used DHE ciphers.
|
||||
|
||||
## PAN-158280
|
||||
|
||||
Fixed an issue where SMB sessions were discarded with the following error message: ctd out of resource.
|
||||
|
||||
## PAN-153019
|
||||
|
||||
Fixed an issue where the following error message appeared: Error: pan_tdb_load_sml_dfa_serialize(pan_tdb_ser.c:2424): pan_util_file_to_buf /opt/pancfg/mgmt/content//cache/common//sml_dfa.cache.ser error, even though the cache file got regenerated if it was missing.
|
||||
|
||||
## PAN-151749
|
||||
|
||||
Fixed an issue where Panorama did not show warnings of the last commit job.
|
||||
|
||||
## PAN-146734
|
||||
|
||||
Fixed an issue where, when a Panorama-pushed configuration was referenced in a local configuration, commits failed after updating the master key on the firewall, which resulted in the following error message: Invalid candidate configuration. Master key change aborted....
|
||||
|
||||
## PAN-145833
|
||||
|
||||
```caveat
|
||||
PA-3200 Series firewalls only
|
||||
```
|
||||
|
||||
Fixed an issue where the firewall stopped recording dataplane diagnostic data in dp-monitor.log after a few hours of uptime.
|
||||
Reference in New Issue
Block a user