157 lines
3.9 KiB
Markdown
157 lines
3.9 KiB
Markdown
---
|
|
type: Addressed
|
|
product: PAN-OS
|
|
version: 11.1.4-h17
|
|
---
|
|
|
|
## PAN-282022
|
|
|
|
Fixed the support limitation for the Panorama M-600 and M-700
|
|
appliances.
|
|
|
|
## PAN-281885
|
|
|
|
Fixed an issue where, when exporting and importing CSV files, the
|
|
hash values of pre-shared key variables set at template and template
|
|
stack levels changed inconsistently, which resulted in both
|
|
variables displaying the same hash value.
|
|
|
|
## PAN-280505
|
|
|
|
Fixed an issue where the web interface did not display a message to
|
|
commit prior changes before attempting a partial configuration load.
|
|
|
|
## PAN-280243
|
|
|
|
Fixed an issue where the firewall lost the pre-shared key
|
|
configuration assigned from a PSK variable when an unrelated device
|
|
group configuration was loaded.
|
|
|
|
## PAN-279336
|
|
|
|
Fixed an issue where the CLI did not display a message to commit
|
|
prior changes before loading a partial configuration.
|
|
|
|
## PAN-279176
|
|
|
|
Fixed an issue where the configuration audit displayed inaccurate
|
|
information after partially loading the configuration via the CLI,
|
|
which caused the audit to flag the configuration as deleted or
|
|
changed.
|
|
|
|
## PAN-277762
|
|
|
|
```caveat
|
|
VM-Series firewalls only
|
|
```
|
|
|
|
Fixed an issue where unexpected
|
|
failovers occurred on firewalls running PAN-OS 11.2.2-h2.
|
|
|
|
## PAN-275713
|
|
|
|
Fixed an issue where the dscd process stopped responding
|
|
when Endpoint Serial Number was enabled,
|
|
which resulted in the Active Directory
|
|
returning a list of serial numbers for a specific firewall from the
|
|
Cloud Identity Engine.
|
|
|
|
## PAN-275077
|
|
|
|
Fixed an issue where DNS Security intermittently logs malicious
|
|
domain URLs as Alert instead of taking a Sinkhole action, even when
|
|
configured to Sinkhole malicious DNS domains.
|
|
|
|
## PAN-274750
|
|
|
|
Fixed an issue where the detailed log view in Panorama did not
|
|
display all packet details for traffic logs received from the cloud.
|
|
|
|
## PAN-273694
|
|
|
|
Fixed an issue where the firewall rebooted due to an out-of-bounds
|
|
memory access that occurred as a result of the SIP content length
|
|
value being split across packets.
|
|
|
|
## PAN-272538
|
|
|
|
Fixed an issue where the configd process stopped
|
|
responding during a commit-all validation when there were
|
|
uncommitted changes and
|
|
share-unused-objects-with-devices
|
|
was set to off.
|
|
|
|
## PAN-272171
|
|
|
|
Fixed an issue where the firewall dropped the AAAA DNS server
|
|
response and caused delays in traffic from Ubuntu or Linux clients
|
|
when DNS Security was enabled.
|
|
|
|
## PAN-270607
|
|
|
|
```caveat
|
|
Firewalls in active/passive HA configurations only
|
|
```
|
|
|
|
Fixed
|
|
an issue where OSPF failed to establish after a failover from the
|
|
active firewall to the passive firewall.
|
|
|
|
## PAN-271351
|
|
|
|
A fix was made to address CVE-2025-0116.
|
|
|
|
## PAN-267091
|
|
|
|
Fixed an issue on Panorama where Elasticsearch repeatedly restarted.
|
|
|
|
## PAN-264678
|
|
|
|
Fixed an issue where Preview Changes did not
|
|
display configuration changes in Commit and push > Push
|
|
Scope.
|
|
|
|
## PAN-262511
|
|
|
|
Fixed an issue on firewalls in HA configurations where OSPF neighbors
|
|
were not established after an HA failover.
|
|
|
|
## PAN-261825
|
|
|
|
Fixed an issue where traffic was dropped when Data Loss Prevention or
|
|
Advanced URL Filtering were enabled. This occurred when the payload
|
|
size was greater than 3.5 KB.
|
|
|
|
## PAN-259706
|
|
|
|
Fixed an issue on Panorama where the web interface was slower than
|
|
expected or unresponsive when monitoring definitions were added in
|
|
the Kubernetes plugin.
|
|
|
|
## PAN-257183
|
|
|
|
Fixed an issue where the firewall dropped DNS traffic when using DNS
|
|
Security.
|
|
|
|
## PAN-254174
|
|
|
|
A fix was made to address CVE-2025-0115.
|
|
|
|
## PAN-248762
|
|
|
|
Fixed an issue where, when the Advanced Routing Engine was configured
|
|
with OSPF, the firewall stopped responding when attempting to
|
|
connect to the neighbor while exchanging route maps.
|
|
|
|
## PAN-239201
|
|
|
|
Fixed an issue where partial commit or partial validation operations
|
|
failed for non-super user administrators with the error
|
|
<device-group-name> is invalid. meta data not
|
|
found for dg <device-group-name>.
|
|
|
|
## PAN-235733
|
|
|
|
Fixed an issue where the displayed NTP information was incorrect if
|
|
the DNS servers timed out.
|