BugZero | Palo Alto Networks BugID PAN-302654 - ( Firewalls in active/passive HA configurations on...

Palo Alto Networks - Defect ID: PAN-302654

( Firewalls in active/passive HA configurations only ) Fixed an issue where, when the HA configuration had multiple logical routers, static or connected routes redistributed into OSPF aged out in the LSDB, which caused the routes to be removed on peer OSPF neighbors.

Palo Alto Networks - Defect ID: PAN-302654

( Firewalls in active/passive HA configurations only ) Fixed an issue where, when the HA configuration had multiple logical routers, static or connected routes redistributed into OSPF aged out in the LSDB, which caused the routes to be removed on peer OSPF neighbors.

Last updated on March 11th, 2026

BugZero Risk Score
6.3 Medium

Overall: 6.3

Severity: 6.4

Community: 3.7

Lifecycle: 10.0

What is the BugZero Risk Score?

Palo Alto Networks Integration

Learn more about where this data comes from

Palo Alto Networks Integration

Learn more

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

Learn more

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise

Learn more

Bug Details

Description

The earliest recollection of this bug is traced back to PAN-OS 11.1.10-h21 - March 11, 2026. This bug is fixed in PAN-OS versions 11.1.10-h21, 11.1.13-h3. ( Firewalls in active/passive HA configurations only ) Fixed an issue where, when the HA configuration had multiple logical routers, static or connected routes redistributed into OSPF aged out in the LSDB, which caused the routes to be removed on peer OSPF neighbors. For more information: https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-10-known-and-addressed-issues/pan-os-11-1-10-h21-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-13-known-and-addressed-issues/pan-os-11-1-13-h3-addressed-issues

Change history

2026-03-11 Added: 11.1.10-h21, 11.1.13-h3

Top Palo Alto Networks Defects

6.3Defect ID: PAN-288001
Fixed an issue where devices with 5G cellular modems did not support the ATT FirstNet auto Access Point Name (APN).
6.3Defect ID: PAN-311285
( Firewalls in HA conditions only ) Fixed an issue where a memory leak occurred related to the ospfd process, which caused RAM usage to continuously increase on active devices in an HA cluster until the device stopped responding, even after an HA failover.
6.3Defect ID: PAN-302790
Fixed an issue where, with Sender Side Loop Detection enabled, BGP WITHDRAWAL updates were not sent to peers after a route was removed, which caused stale routes to persist in the BGP table of neighboring firewalls.
6.3Defect ID: PAN-269228
Fixed an issue where the all_task process stopped responding, which caused a split brain condition.
6.3Defect ID: PAN-302654
( Firewalls in active/passive HA configurations only ) Fixed an issue where, when the HA configuration had multiple logical routers, static or connected routes redistributed into OSPF aged out in the LSDB, which caused the routes to be removed on peer OSPF neighbors.

Ready to prevent the next vendor outage?

Get a demo

Palo Alto Networks - Defect ID: PAN-302654

( Firewalls in active/passive HA configurations only ) Fixed an issue where, when the HA configuration had multiple logical routers, static or connected routes redistributed into OSPF aged out in the LSDB, which caused the routes to be removed on peer OSPF neighbors.

Palo Alto Networks - Defect ID: PAN-302654

( Firewalls in active/passive HA configurations only ) Fixed an issue where, when the HA configuration had multiple logical routers, static or connected routes redistributed into OSPF aged out in the LSDB, which caused the routes to be removed on peer OSPF neighbors.

Last updated on March 11th, 2026

BugZero Risk Score6.3 Medium

Bug Details

Links

Top Palo Alto Networks Defects

Ready to prevent the next vendor outage?

BugZero Risk Score
6.3 Medium