: Addressed Issues in OpenConfig Plugin 2.1.6
Focus
Focus

Addressed Issues in OpenConfig Plugin 2.1.6

Table of Contents

Addressed Issues in OpenConfig Plugin 2.1.6

Addressed issues in the 2.1.6 version of the OpenConfig plugin.
The following are addressed issues in the OpenConfig 2.1.6 version of the plugin.

PLUG-23324

Fixed a security issue where authenticated gNMI users could execute arbitrary PAN-OS® operational commands through the gNMI XML API handler without command-level authorization.

PLUG-23275

Fixed a security issue where authenticated gNMI users could read or delete files outside of the permitted directories through the streaming telemetry file upload handlers.

PLUG-23370

Fixed an issue where PHP package dependencies were downloaded over plaintext HTTP with TLS disabled during plugin builds. TLS is now enabled and repository URLs use HTTPS.

PLUG-10983

Fixed an issue where subscribing to the components/component/subcomponents/subcomponent/state path returned internal filesystem mount paths as subcomponent names instead of the expected hardware component data, resulting in fewer valid entries than expected in the gNMI subscribe response.

PLUG-24750

Added OpenConfig leaf-path support for additional SNMP OIDs to achieve parity with SNMP-based monitoring, including system uptime (system/state/up-time), hardware component serial number (components/component/state/serial-no), hardware component part number (components/component/state/part-no), HA mode (ha-groups/ha-group/state/ha-mode), LACP system ID (lacp/interfaces/interface/members/member/state/system-id), and BGP peer session state, admin status, remote AS, remote address, and local address.

PLUG-24679

Added OpenConfig subscribe and get RPC support for the interfaces/interface/state/last-change leaf path, which reports the timestamp of the most recent interface operational state change.