The customer has upgraded their Junos OS to 22.2R3-S2, and would like to check the Security Bulletin JSA11169 [juniper.net] issue.

1. OpenSSH Multiple Vulnerabilities

2. SHA1 deprecated setting for SSH

Security Bulletin JSA11169 [juniper.net] issue.

Related PR public document:

https://prsearch.juniper.net/problemreport/PR1241002

2021-04 Security Bulletin: Junos OS: OpenSSH 7.4 Multiple vulnerabilities resolved.

https://kb.juniper.net/JSA11169 [juniper.net]

Common Vulnerability Scoring System (CVSS) and Juniper's Security Advisories

https://supportportal.juniper.net/s/article/Common-Vulnerability-Scoring-System-CVSS-and-Juniper-s-Security-Advisories?language=en_US

Use Junos 22.2R3-S2.8 as example, and the OpenSSH version 7.5 is embedded in the Junos and it had fixed the previous known issues in version 7.4.

For NG-RE, the base OS - Linux, it use OpenSSH_8.0p1 version, no issue.

So the previous known issues had been resolved.

{master}

labroot@jtac-mx480-router-re0> show version

Hostname: jtac-mx480-router-re0

Model: mx480

Junos: 22.2R3-S2.8

JUNOS OS Kernel 64-bit [20230531.cf35cdf_builder_stable_12_222]

{master}

labroot@jtac-mx480-router-re0> start shell user root

Password:

root@jtac-mx480-router-re0:/var/home/labroot # ssh -V

OpenSSH_7.5, SSH protocols 1.5/2.0, OpenSSL 1.0.2zf 21 Jun 2022

SSH release 23.1R20230401_0019_builder built by builder on 2023-04-01 00:22:49 UTC

For NG-RE, Junos over Linux, logging base-OS, check OpenSSH version:

-------------------------------------------------------------------------------------

root@jtac-mx480-router-re0:/var/home/labroot # vhclient -s

Last login: Thu Sep 28 01:26:06 2023 from local-node

root@jtac-mx480-router-re0-node:~# ssh -V

OpenSSH_8.0p1, OpenSSL 1.1.1k 25 Mar 2021

N/A