---
type: Addressed
product: PAN-OS
version: 9.0.16
source: common-crawl
crawl: CC-MAIN-2026-12
---

## PAN-179581

Fixed an issue on firewalls in high availability (HA) configurations where a process (brdagent) stopped responding on a suspended active peer, which caused the suspended firewall to continue sending traffic.

## PAN-177551

A fix was made to address a vulnerability that enabled an authenticated network-based administrator to upload a specifically created configuration that disrupted system processes and was able to execute arbitrary code with root privileges when the configuration was committed ([CVE-2022-0024](https://security.paloaltonetworks.com/CVE-2022-0024)).

## PAN-176703

Fixed an issue that occurred after upgrading to a PAN-OS 9.0 or later release where commits to the firewall configuration failed with the following error message: statistics-service is invalid.

## PAN-175716

Fixed an issue where sorting address groups by name, address, or location did not work on a device group that was part of a nested device group.

## PAN-175211

Fixed a memory leak issue in the mgmtsrvr process.

## PAN-174998

```caveat
M-200 and M-500 appliances only
```

Fixed a capacity issue that was caused by high operational activity and large configurations. This fix increases the virtual memory limit on the configd process to 32GB.

## PAN-174709

Fixed an out-of-memory (OOM) condition that occurred due to multiple parallel jobs being created by the scheduled log export feature.

## PAN-170997

Fixed an issue where FQDN service routes were not installed after a system reboot.

## PAN-170952

Fixed an issue where the dataplane failed due to path monitor failure.

## PAN-163245

Fixed an issue where a commit-all or push to the firewall from Panorama failed with the following error message: client routed requesting last config in the middle of a commit/validate. Aborting current commit/validate.

## PAN-161940

Fixed an issue where the firewall did not honor the peer RX interval timeout in a Bidirectional Forwarding Detection (BFD) INIT state.

## PAN-161297

Fixed an interoperability issue with other vendors when IKEv2 used SHA2-based certificate authentication.

## PAN-159936

Fixed an issue where BGP routing stopped advertising a redistributed route when a similar new redistributed route was configured.

## PAN-155532

Fixed an issue where the mgmtsrv process restarted due to a missing protective check around access to potentially NULL pointers.

## PAN-149911

Fixed an issue where URL filtering logs for credential phishing displayed a slash character ( / ) in the URL field.