PAN-OS 9.0.16 Addressed Issues
Expand all | Collapse all
End-of-Life (EoL)
PAN-OS 9.0.16 Addressed Issues
PAN-OS® 9.0.16 addressed issues.
| Fixed an issue on firewalls in high availability
(HA) configurations where a process ( brdagent) stopped
responding on a suspended active peer, which caused the suspended
firewall to continue sending traffic. |
| A fix was made to address a vulnerability
that enabled an authenticated network-based administrator to upload
a specifically created configuration that disrupted system processes
and was able to execute arbitrary code with root privileges when
the configuration was committed ( CVE-2022-0024). |
| Fixed an issue that occurred after upgrading
to a PAN-OS 9.0 or later release where commits to the firewall configuration
failed with the following error message: statistics-service is invalid . |
| Fixed an issue where sorting address groups
by name, address, or location did not work on a device group that
was part of a nested device group. |
| Fixed a memory leak issue in the mgmtsrvr process. |
| ( M-200 and M-500 appliances only )
Fixed a capacity issue that was caused by high operational activity
and large configurations. This fix increases the virtual memory
limit on the configd process to 32GB. |
| Fixed an out-of-memory (OOM) condition that
occurred due to multiple parallel jobs being created by the scheduled
log export feature. |
| Fixed an issue where FQDN service routes
were not installed after a system reboot. |
| Fixed an issue where the dataplane failed
due to path monitor failure. |
| Fixed an issue where a commit-all or push
to the firewall from Panorama failed with the following error message: client routed requesting last config in the middle of a commit/validate. Aborting current commit/validate . |
| Fixed an issue where the firewall did not
honor the peer RX interval timeout in a Bidirectional Forwarding
Detection (BFD) INIT state. |
| Fixed an interoperability issue with other
vendors when IKEv2 used SHA2-based certificate authentication. |
| Fixed an issue where BGP routing stopped
advertising a redistributed route when a similar new redistributed
route was configured. |
| Fixed an issue where the mgmtsrv process restarted
due to a missing protective check around access to potentially NULL
pointers. |
| Fixed an issue where URL filtering logs
for credential phishing displayed a slash character ( / ) in the
URL field. |
