72 lines
2.6 KiB
Markdown
72 lines
2.6 KiB
Markdown
---
|
|
type: Addressed
|
|
product: PAN-OS
|
|
version: 9.0.16
|
|
source: common-crawl
|
|
crawl: CC-MAIN-2026-12
|
|
---
|
|
|
|
## PAN-179581
|
|
|
|
Fixed an issue on firewalls in high availability (HA) configurations where a process (brdagent) stopped responding on a suspended active peer, which caused the suspended firewall to continue sending traffic.
|
|
|
|
## PAN-177551
|
|
|
|
A fix was made to address a vulnerability that enabled an authenticated network-based administrator to upload a specifically created configuration that disrupted system processes and was able to execute arbitrary code with root privileges when the configuration was committed ([CVE-2022-0024](https://security.paloaltonetworks.com/CVE-2022-0024)).
|
|
|
|
## PAN-176703
|
|
|
|
Fixed an issue that occurred after upgrading to a PAN-OS 9.0 or later release where commits to the firewall configuration failed with the following error message: statistics-service is invalid.
|
|
|
|
## PAN-175716
|
|
|
|
Fixed an issue where sorting address groups by name, address, or location did not work on a device group that was part of a nested device group.
|
|
|
|
## PAN-175211
|
|
|
|
Fixed a memory leak issue in the mgmtsrvr process.
|
|
|
|
## PAN-174998
|
|
|
|
```caveat
|
|
M-200 and M-500 appliances only
|
|
```
|
|
|
|
Fixed a capacity issue that was caused by high operational activity and large configurations. This fix increases the virtual memory limit on the configd process to 32GB.
|
|
|
|
## PAN-174709
|
|
|
|
Fixed an out-of-memory (OOM) condition that occurred due to multiple parallel jobs being created by the scheduled log export feature.
|
|
|
|
## PAN-170997
|
|
|
|
Fixed an issue where FQDN service routes were not installed after a system reboot.
|
|
|
|
## PAN-170952
|
|
|
|
Fixed an issue where the dataplane failed due to path monitor failure.
|
|
|
|
## PAN-163245
|
|
|
|
Fixed an issue where a commit-all or push to the firewall from Panorama failed with the following error message: client routed requesting last config in the middle of a commit/validate. Aborting current commit/validate.
|
|
|
|
## PAN-161940
|
|
|
|
Fixed an issue where the firewall did not honor the peer RX interval timeout in a Bidirectional Forwarding Detection (BFD) INIT state.
|
|
|
|
## PAN-161297
|
|
|
|
Fixed an interoperability issue with other vendors when IKEv2 used SHA2-based certificate authentication.
|
|
|
|
## PAN-159936
|
|
|
|
Fixed an issue where BGP routing stopped advertising a redistributed route when a similar new redistributed route was configured.
|
|
|
|
## PAN-155532
|
|
|
|
Fixed an issue where the mgmtsrv process restarted due to a missing protective check around access to potentially NULL pointers.
|
|
|
|
## PAN-149911
|
|
|
|
Fixed an issue where URL filtering logs for credential phishing displayed a slash character ( / ) in the URL field.
|