It is important to be aware that the CTPView software installation and support policy has changed starting with the 9.xRx releases.

The purpose of this article is to provide a root document, which lists the history of the RPM changes that have occurred to the CTPView software over time due to security vulnerabilities.

As RPM changes are needed to remediate security vulnerabilities, a new article detailing how to resolve them will be published and the article will be added here in this primary article. This article will contain all the known security vulnerabilities solutions since version 9.1R3.1.

New installation steps have been implemented when installing CTPView 9.x releases. The Centos OS has been removed from the CTPView release starting with 9.0R1 and all later releases (9.1R1, 9.1R2, 9.1R3) (in CTPView 7.3Rx it was included with the CTPView image). It is now the customer's responsibility to install the Centos OS prior to installing the CTPView RPM.

Juniper only provides the CTPView RPM and certain other RPMs, which are not part of the Centos OS 7.5 build 1804 (which must be used to build a CTPView Server). Refer to the CTPView Network Management System Administration Guide for more details in the section titled "CTPView Installation and Maintenance Policy".

Published Security Vulnerability Solutions to Date

KB37816 [juniper.net] - [CTPView] Security Vulnerability Fix_1 for CTPView 9.1R3.1 
KB69664 [juniper.net] - [CTPView] Security Vulnerability Fix_2 for CTPView 9.1R3.1
KB69862 [juniper.net] - CTPView-Security-Vulnerability-Fix-3-for-CTPView-9-1R3-1