Article Detail

Alert Type

SRN - Software Release Notification

RiskRisk Description

Low/Notification

Software Release Notification

ImpactImpact Description

Low/Notification

Software Release Notification

Product Affected

SRX

Alert Description

Junos Software Service Release version 24.4R1-S3 is now available for download from the Junos software download site

Download Junos Software Service Release:

Go to Junos Platforms - Download Software page
Input your product in the "Find a Product" search box
From the Type/OS drop-down menu, select Junos SR
From the Version drop-down menu, select your version
Click the Software tab
Select the Install Package as need and follow the prompts

NOTE: Starting on August 30th, 2024, we include PR's severity with each entry. See KB86335 [juniper.net] for the definition of PR's Severity

Junos Selective Update (JSU) feasible

Not applicable

Call to Action

Review

Solution

Junos Software service Release version 24.4R1-S3 is now available for SRX platforms

24.4R1-S3 - List of Fixed issues

PR Number	Synopsis	Category: SRX4700 datapath related issue
1849108 Major	It is not recommended to restart chassisd using CLI command "restart chassis-control" in MNHA setup Product-Group=junos Severity=Major	It is not recommended to restart chassisd using CLI command "restart chassis-control" in MNHA (Multinode High Availability) setup. It will cause unexpected behaviors.
PR Number	Synopsis	Category: SRX1600 MACsec
1863576 Minor	Packet drops can occur when packets are received with a size equal to the default MRU Product-Group=junos Severity=Minor	On SRX1600, SRX2300 and SRX4300 platforms, when packets are received with a size matching the default MRU (Maximum Receive Unit) value of 1522 bytes, packets are dropped, leading to an impact on traffic.
PR Number	Synopsis	Category: the replication daemon (repd) for Shared Memory-base
1870183 Major	RPD might crash when upgrading using no-validate. Product-Group=junos Severity=Major	RPD might crash when upgrading without using no-validate. Use no-validate to avoid the crash.
PR Number	Synopsis	Category: Device Configuration Daemon
1848768 Major	MTU configuration is not applied from the configuration group after commit and "warning" is seen Product-Group=junos Severity=Major	When configuring MTU on interfaces through a configuration-group and commit the changes, those are not saved on the configuration file.
PR Number	Synopsis	Category: AAA, auditd issues
1862203 Minor	Radius authentication is failing when Challenge Token is entered Product-Group=junos Severity=Minor	On all Junos and Evo platforms, the Radius Multi-Factor Authentication (MFA) failing for user login if the password and token were provided in two separate steps.
PR Number	Synopsis	Category: Configd, ffp issues
1877439 Minor	Traffic drop occurs on Junos Evolved platforms when prefix is moved between dynamic prefix-lists used in firewall filter Product-Group=junos Severity=Minor	On all Junos Evolved platforms, when a firewall filter is configured with a dynamic prefix-list that is referenced using an apply-path statement, moving a prefix from one such prefix-list to another where both prefix-lists match the apply-path pattern results in the prefix not being programmed in the PFE. This causes traffic loss for that prefix. The issue is triggered when the configuration includes apply-path pointing to both the source and destination prefix-lists, and a prefix is deleted from one and added to the other through a commit operation.
PR Number	Synopsis	Category: mgd, ddl, odl infra issues
PR Number	Synopsis	Category: EVPN control plane issues
1851659 Minor	Few seconds traffic loss during previous DF coming back with EVPN-VPWS non-revertive DF preference feature enabled Product-Group=junos Severity=Minor	With DF(designated forwarder) preference in non-revertive mode, we see previous DF which comes after failure, becomes primary for few seconds and we see few seconds traffic loss due to this.
PR Number	Synopsis	Category: EX4400 platform
1845365 Major	PEM mismatch alarms vanished after performing system reboot on member Product-Group=junos Severity=Major	PEM mismatch alarms are cleared from the master after rebooting a Virtual Chassis member containing an unsupported mixed AC/DC PSU combination.
PR Number	Synopsis	Category: SRX1500 platform software
1831955 Major	The SRX1500 drops the packet if MTU matches the MRU of the receiving device Product-Group=junosvae Severity=Major	On SRX1500 platforms, if the Maximum Transmission Unit (MTU) is configured to match the Maximum Receive Unit (MRU) of the receiving device, packet drops occur. This occurs because additional processing overhead increases the packet size beyond the MRU limit, causing the receiving device to drop the packets.
PR Number	Synopsis	Category: Libjtask for RPD tasks, scheduler, timers, memory, and slip
1843627 Critical	Memory leak when deactivating/reactivating routing instances with vrf-table-label Product-Group=junos Severity=Critical	On all Junos Evolved platforms, a memory leak occurs when a routing instance configured with "vrf-table-label" is deactivated and then reactivated, followed by a Routing Engine (RE) switchover on dual RE systems. This issue causes a slow memory leak in the system.
PR Number	Synopsis	Category: JFlow bug tracker for SRX platforms
1843679 Minor	Application crash is observed due to insufficient memory when a large number of JFlow entries are created Product-Group=junos Severity=Minor	On Junos OS SRX platforms with JFlow configured with sampling interval set to 1, traffic impact is observed due to insufficient memory for the Layer 7 applications leading to application failure. The issue happens when a large number of JFlow entries are created exhausting memory potentially leading to crash.
PR Number	Synopsis	Category: Flow Module
1865294 Major	SRX4700 custom application session inactive timeout is half of the configured value Product-Group=junos Severity=Major	When customer config custom application inactive timeout value to control session timeout value, the actual session timeout value is half of the configured value
PR Number	Synopsis	Category: all logging related bugs on srx platforms
1860597 Major	Security log report messages w.r.t logical system is not generated Product-Group=junos Severity=Major	show security log report cli command for logical systems is not working for 24.2R2, 24.4R1-S2, if log report is disabled under root system. Work around is available for this issue.
PR Number	Synopsis	Category: Firewall Policy
1874860 Major	"lookup-intact-on-commit" configuration,when commit, an random address may be missing from the policy Product-Group=junos Severity=Major	With the "lookup-intact-on-commit" configuration, commits may result in random address objects being lost from policies
PR Number	Synopsis	Category: IPSEC/IKE VPN
1864758 Major	Post reboot , IPSec VPN is not coming up over MNHA active/active deployment Product-Group=junos Severity=Major	On all SRX platforms with the new IKE daemon (iked) enabled in an MNHA (Multinode High Availability) active active setup, with the IKE gateway is configured to use the loopback (lo0) interface with the node-local knob enabled, Internet Protocol Security (IPsec) VPN will not come up after a reboot.
1866890 Major	Tunnel sync failure on backup node post 'restart chassis-control' in MNHA Active-Active mode Product-Group=junos Severity=Major	On SRX platforms configured in Active-Active MNHA (Multi Note High Availability) mode, after executing restart chassis-control, SRG2 (Service Redundancy Group) came up in the 'Backup' state when the PFE (Packet Forwarding Engine) re-registered with iked. Due to a logic error, iked incorrectly identified SRG2 as 'Active' and proceeded to clear its IPsec tunnels. Since SRG2 was actually in 'Backup', it could not renegotiate the tunnels, resulting in tunnel loss and failure to re-establish the tunnels.
PR Number	Synopsis	Category: Security platform jweb support
1805828 Major	Created address-sets in global address book is not visible in J-Web Product-Group=junos Severity=Major	On SRX platform, created address-sets in global address book may not be visible in J-Web
1858466 Major	VPN failures on SRX due to file descriptor issue Product-Group=junos Severity=Major	On all SRX platforms, Juniper Secure Connect (JSC) clients may fail to establish a VPN session after successful authentication if more than 20 concurrent connections per client IP are active. In a NATTed environment, the 21st connection will fail, and the customer must retry.
1876075 Minor	Upgrade and Downgrade will fail from J-Web in SRX4600 Product-Group=junos Severity=Minor	On SRX4600, upgrades and downgrades will fail from J-Web with the error message: "Installation Progress failed at Receive Package File" from release 23.4 and above.
PR Number	Synopsis	Category: Software Junos/JunosEvolved lab product
1880554 Major	Configuring sflow brings the FPC down Product-Group=junos Severity=Major	The sflow feature when enabled on vJunos-switch or vJunos-router can bring the FPC down (to OFFLINE) due to a crash in the vmxt process i.e. the PFE micro-kernel. The work around is to unconfigure SFLOW. The issue is fixed in multiple releases as noted in the PR.
PR Number	Synopsis	Category: Layer2 forwarding on EX/NTF/PTX/QFX
1864295 Major	L2ald process crash is observed upon executing hidden command "show ethernet-switching debug-statistics fast-mac-update" in case the command doesn't have any output Product-Group=junos Severity=Major	On all Junos and Junos OS Evolved platforms, the l2ald process crash is observed upon executing the hidden command "show ethernet-switching debug-statistics fast-mac-update" in case the command doesn't have any output.
PR Number	Synopsis	Category: SW PRs for MPC10E Interfaces
1727066 Major	Extremely fast interface flaps in MPC10E line-card causes cpu to hog which leads to fpc reboot. Product-Group=junos Severity=Major	Extremely fast interface flaps in MPC10E line-card causes cpu to hog which leads to fpc reboot.
PR Number	Synopsis	Category: build tools
1874525 Major	FTP default mode changed from active to passive on 24.2R2 Product-Group=junos Severity=Major	An upgrade to libfetch caused the default FTP mode to move from active to passive. This PR corrects this as customers more than likely expect the previous active FTP functionality on their networks.
PR Number	Synopsis	Category: Phone-Home-Client Infrastructure
1871802 Critical	High memory and CPU usage due to unintended phone-home client activation Product-Group=junos Severity=Critical	On Junos OS Evolved platforms, high memory and CPU usage may occur if the phone-home client (PHC) is unintentionally triggered, such as when the device boots with factory default settings or when phone-home is manually configured. This can lead to system slowness, crashes, and eventual device reboots.
PR Number	Synopsis	Category: PTX10K Routing Engine
1870082 Critical	Image validation fails during the Junos VM validation Product-Group=junos Severity=Critical	On all Junos platforms that use pkgs/junos-vmguest/mtx/vmhost-pkg-support when loading image to 25.3+, image validation fails.
PR Number	Synopsis	Category: QFX EVPN / VxLAN
1866130 Minor	Command "show pfe vxlan" is not supported on QFX5200 devices Product-Group=junosvae Severity=Minor	Support added for "show pfe vxlan" CLI command on QFX 5200 devices
PR Number	Synopsis	Category: RPD Next-hop issues including indirect, CNH, and MCNH
1851629 Minor	Next-hop APIs to support LDP stitching cases over BGP routes pointing to list of indirects Product-Group=junos Severity=Minor	On all Junos and Junos Evolved platforms this is an enhancement for Nexthop APIs to support LDP stitching cases over BGP routes pointing to list of indirects next-hops.
PR Number	Synopsis	Category: RPD route tables, resolver, routing instances, static routes
1832162 Major	rt_instance memory leak on bulk configuration changes Product-Group=junos Severity=Major	A memory leak of approximately 17MB to 38MB in the rt_instance memory block occurs when all three components routing instances, interfaces, and protocols are deactivated and immediately activated or rolled back without a delay. This is seen in large-scale environments (e.g., 4k routing instances) with sharding and NSR enabled. A 4-minute delay between deactivation and activation or rollback prevents the issue. This is a memory leak only, with no direct service or traffic impact.
1847811 Minor	The rpd crash on commit when configuring router-advertisement with DNS search label under 3 characters Product-Group=junos Severity=Minor	On all Junos and Junos OS Evolved platforms, committing a configuration under protocols router-advertisement with a dns-search-list containing a domain label shorter than 3 characters causes the rpd (Routing Protocol Daemon) process crashes and restart. This results in configuration commit failure and temporary disruption to routing protocols.
PR Number	Synopsis	Category: SRX branch platforms
1853238 Minor	Flexible-vlan-tagging option is missing under interface hierarchy on SRX3xx series Product-Group=junos Severity=Minor	On SRX3xx series configured with flexible-vlan-tagging, after upgrading the device to Junos version 23.4R2 or higher the flexible-vlan-tagging option is missing under the interface hierarchy. This leads to a syntax error, stopping users from setting the flexible-vlan-tagging.
PR Number	Synopsis	Category: SRX-1RU platfom datapath SW defects
1842873 Minor	Load balance hash-key forwarding persists when switching to Layer 3-only Product-Group=junos Severity=Minor	On Junos SRX4600, SRX1600, SRX2300 and SRX4300 platforms, when switching load balance from L3+L4 to L3, hash-key forwarding fails; the device retains L3+L4.
PR Number	Synopsis	Category: SRX-1RU platfom related protocol, QoS, filtering features et
1823577 Major	On SRX4600 platforms with heavy traffic, the FPGA drops packets Product-Group=junosvae Severity=Major	On SRX4600 platforms, if a few high-priority queues handle excessive traffic, those queues can become stuck, leading to packet drops.
PR Number	Synopsis	Category: MX10003/MX204 Timing/Sync-E issues tracking
1863091 Major	FPC will crash in MX10003 during the Master switchover to RE1 or Master set to RE1 Product-Group=junos Severity=Major	MX10003 FPC (Flexible PIC Concentrators) will crash if Primary RE (Routing Engine) switchover to RE1 (Routing Engine 1) or RE1 is set to Master from release 21.2 and above.
PR Number	Synopsis	Category: ZT/YT pfe l3 forwarding issues
1858076 Major	The aftd process crash is seen on Junos OS platforms running MPC10, MPC11, LC4800, LC9600 line cards and in Junos OS platforms MX304, EX9200-15C Product-Group=junos Severity=Major	On Junos OS platforms running MPC10, MPC11, LC4800, LC9600 line cards and in Junos OS platforms MX304, EX9200-15C, aftd process crash is seen resulting in crash of FPC (Flexible PIC Concentrator) line card while the route module of PFE (Packet Forwarding Engine) processing route churns as simultaneous actions (add/delete/read) by multiple threads on the process.
PR Number	Synopsis	Category: Trio pfe stateless firewall software
1837840 Major	Incorrect color-aware srTCM marking with yellow packet loss priority Product-Group=junos Severity=Major	There was a software side limitation on the highest CBS that can be configured for MPCs that have LU type lookup chips due to a hardware PR. The Hardware PR was resolved in MX240/ MX480/ MX960/ MX2008/ MX2010/ MX2020/ MX10003/ MX10008/MX10016/EX9200/EX9204/ EX9208/EX9214/EX9251/ EX9253/SRX5400/ SRX5600/SRX5800 platforms, but the software-side limitation was not removed for the same. Due to this limitation, whenever the CBS was configured above its limit (earlier 33m), the low-level parameters used to get configured such that the packets would not have any credits available, resulting in them getting marked as RED.
PR Number	Synopsis	Category: Trio pfe bridging, learning, stp, oam, irb software
1846365 Major	Traffic drops after link flap on active-active ESI setup with MAC pinning enabled Product-Group=junos Severity=Major	On MX platforms with ukern (legacy) FPC (Flexible PIC Concentrator) based in trio chipset and configured in an active-active ESI (Ethernet Segment Identifier) setup, traffic will be dropped after a flap of the DF (Designated Forwarder) or BDF (Backup Designated Forwarder) LAG (Link Aggregation Group) interface member.
PR Number	Synopsis	Category: UI Infrastructure - mgd, DAX API, DDL/ODL
1854070 Minor	cli coredump genarated when the size of buffer area (user input) increased to 1GB Product-Group=junos Severity=Minor	Cli coredump genarated when the size of buffer area (user input) increased to 1GB.
1861063 Critical	Unexpected issues such as login failures or disabled interfaces observed following abrupt reboot during commit operation Product-Group=junos Severity=Critical	On Junos EX platforms with boot-time optimization enabled, an abrupt reboot during a commit operation can cause configuration file corruption, potentially leading to issues like login failures or disabled interfaces.
PR Number	Synopsis	Category: Issues related to NETCONF
1816904 Major	Native junos modules in hello-message and yang modules in /var/run/db/yangs are not same Product-Group=junos Severity=Major	Native junos modules in hello-message and yang modules in /var/run/db/yangs are not same. The build failure is due to a mismatch between the native Junos modules in the hello message and YANG modules in /var/run/db/yangs, causing the test to fail with a difference in lengths: 229 != 230.
PR Number	Synopsis	Category: web filterig issues
1854519 Major	FPC crashing when web filtering type set to "juniper-enhanced" or "NG-juniper" Product-Group=junos Severity=Major	On all SRX platforms, when the web-filtering type set to "juniper-enhanced" or "NG-juniper" (NextGen-juniper), it might cause FPC (Flexible Port Concentrator) card crash and with "srxpfe" or "lcore" crash files generated.
PR Number	Synopsis	Category: vSRX Platform
1886948 Minor	SRX- Enable zeroization on VSRX device to destroy cryptographic keys	Now CLI "request system zerioze" is supported for VSRX3.0.

24.4R1-S3 - List of Known issues

PR Number	Synopsis	Category: SRX4700 interface and optics related issues
1834834 Major	SRX4700: Casino Royale: SnP:Error message observed on IPSEC config load "[Error] NH : Nexthop Entry not found for (nexthop-id:43134) , error: No such file or directory" Product-Group=junos	Error "Nexthop Entry not found for (nexthop-id:43134) " seen on SRX4700 during bootup, This has no functional impact. Resolved In: evo:24.4R2-EVO evo:25.2R1-EVO evo:25.2R2-EVO evo:25.3R1-EVO junos:25.2R1 junos:25.2R2 junos:25.3R1
PR Number	Synopsis	Category: Covers Application classification workflows apart from custo
1833667 Major	Custom application detection fails for L4 traffic after upgrade due to uncompiled signatures Product-Group=junos	On SRX branch series devices configured with custom applications and a signature package (sigpack) already installed, installing a new sigpack may result in the failure to recompile the custom applications, causing detection failures. During Layer 4-7 traffic processing, custom applications may be incorrectly marked as "INCONCLUSIVE," impacting application detection. Resolved In: junos:24.4R2 junos:25.2R1 junos:25.3R1
PR Number	Synopsis	Category: EX4100 RE, Platform Infra, Drivers
1833447 Major	"tcp_timer_keep" messages are observed in the logs during reboot trigger while PoE tests are running Product-Group=junos	During a reboot or a shutdown operation, these messages are expected due to the fact that the applications that are running in the master RE and backup RE are stopped. This indicates that the peer process (in backup RE typically) is not sending/receiving the keepalive messages. The peer process in the backup RE maybe terminated or getting spawned due to the shutdown or a boot-up activity. kernel: tcp_timer_keep: Dropping socket connection due to keepalive timer expiration, idle/intvl/cnt: 300/300/5 kernel: tcp_timer_keep:Local(0x80000001:6987) Foreign(0x80000010:56833) kernel: tcp_timer_keep: Dropping socket connection due to keepalive timer expiration, idle/intvl/cnt: 300/300/5 kernel: tcp_timer_keep:Local(0x80000001:6987) Foreign(0x80000010:55261) Resolved In:
PR Number	Synopsis	Category: EX interfaces issues
1580560 Major	On EX2300, EX3400,:EX4300-48MP and EX4300 , Pause frames counters does not get incremented when pause frames are sent. Product-Group=junos	On EX2300, EX3400,:EX4300-48MP and EX4300 , Pause frames counters does not get incremented when pause frames are sent. Resolved In:
1823688 Major	Interface goes down after a dc-pfe (Data Centre Packet Forwarding Engine) process restart in a Virtual Chassis environment on EX4400 platform Product-Group=junos	On a EX4400 virtual chassis environment, if the dc-pfe process restart for any reasons or restarted manually, then there is a possibility of some interfaces going down. Resolved In: junos:24.2R2-S1 junos:24.4R2 junos:25.2R1 junos:25.3R1
PR Number	Synopsis	Category: EX POE
1845161 Major	In EX4400 based POE platforms the logs related to a poe bounce event may not be seen in /var/log/messages Product-Group=junos	When a poe bounce command is issued in quick succession for multiple ports, the 'poe enabled' logs may not be printed for some of the poe ports. This is a cosmetic issue and functionality works as expected. Resolved In:
PR Number	Synopsis	Category: Kernel software for AE/AS/Container
1762490 Minor	JDI-RCT-MPC10E: Ksyncd crash on backup RE after fpc reboot Product-Group=junos	On MX series, when PS over RLT is configured where all member LTs are hosted on the same FPC and user restarts this FPC then on rare occasion, ksyncd crash can occur on backup RE. However, there is no impact on the master and only backup RE is affected. This issue is not consistent and seen only once out of ~10 or 15 fpc restart operations. Resolved In: evo:24.4R2-EVO evo:25.2R1-EVO junos:24.4R2 junos:25.1R1 junos:25.2R1
PR Number	Synopsis	Category: Adresses ALG issues found in JSF
1852968 Major	The SRX platform may experience a flowd process crash and generate core dump files when the ALG feature is enabled Product-Group=junos	On SRX platforms running the Junos Operating System (OS) with Application Layer Gateway (ALG) enabled, in rare scenarios, flowd process can crash and crash files are generated. While the platform eventually recovers, traffic loss will occur during this process. Resolved In: junos:23.2R2-S4 junos:23.4R2-S5 junos:24.2R2-S1 junos:24.4R1-S2 junos:24.4R2 junos:25.1R1 junos:25.2R1
PR Number	Synopsis	Category: Flow Module
1847419 Minor	Type 5 VXLAN traffic drops are observed when SRX run as L3-VNI gateway and the ingress and egress traffic goes to the same Type-5 VXLAN peer Product-Group=junos	On Junos OS SRX platforms running as L3-VNI (Layer 3 - Virtual Network Identifier) gateway in EVPN-VxLAN (Ethernet Virtual Private Network - Virtual Extensible LAN) scenario, traffic drops will be observed if traffic passes through two VxLAN tunnels and traffic fails to cross the two VxLAN tunnels when the PFE (Packet Forwarding Engine) is processing the packet having same remote IPs for two VXLAN tunnels. Resolved In: junos:23.2R2-S2-J8 junos:23.2R2-S4 junos:24.4R2 junos:24.4R2-S1 junos:25.1R1 junos:25.2R1 junos:25.3R1
PR Number	Synopsis	Category: IPSEC/IKE VPN
1861056 Critical	Recommended command to failover from Primary to Backup node Product-Group=junos	On SRX4700 and SRX5K platform, in MNHA with SRG1 active on node0 and SRG2 active on node1, "restart chassis-control" in node0, after while, followed by "restart chassis-control on node1", both the SRGs became active on node0. However the forwarding table ARI-TS route become dead, therefore traffic to the tunnel is dropped Resolved In: junos:24.4R2 junos:25.2R1 junos:25.2R2 junos:25.3R1
PR Number	Synopsis	Category: SW PRs for MPC10E PMB
1731258 Major	MPC10 and MPC11 line cards experiencing unexpected reboots Product-Group=junos	Line cards such as MPC10 and MPC11 experience unexpected reboots because of CPU C-states which are enabled by default thus impacting the customer production traffic. Resolved In: evo:23.4R2-EVO evo:24.1R1-EVO junos:20.3X75-D441 junos:20.3X75-D46 junos:20.3X75-D52 junos:21.4R3-S7 junos:22.2R3-S4 junos:22.2R3-S5 junos:22.4R3 junos:22.4R3-S1 junos:22.4R3-S2 junos:23.2R2 junos:23.4R2 junos:24.1R1
PR Number	Synopsis	Category: MPC10E timing and synchronization
1767930 Major	MPC10E: Support of G.8275.1 PTP Hybrid mode with speed 400G Product-Group=junos	MPC10E-400G speed PTP performance is not compliant with class-B for ITU-T-G.8273.2. Resolved In: evo:24.4R2-EVO evo:25.2R1-EVO evo:25.3R1-EVO junos:23.4R2-S5 junos:24.4R2 junos:25.2R1 junos:25.3R1
PR Number	Synopsis	Category: FreeBSD Kernel Infrastructure
1872010 Major	Junos OS: A local attacker with shell access can execute arbitrary code (CVE-2025-21590) Product-Group=junos	An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local attacker with high privileges to compromise the integrity of the device. Please refer to https://supportportal.juniper.net/JSA93446 [juniper.net] for more information. Resolved In: junos:21.2R3-S9 junos:21.4R3-S11 junos:22.2R3-S7 junos:22.4R3-S7 junos:23.2R2-S4 junos:23.4R2-S5 junos:24.2R2-S1 junos:24.4R2 junos:25.3R1
PR Number	Synopsis	Category: QFX5200/5110/5120/5210 Platfom issues
1758400 Major	JUNOS_REG: QFX51200-48YM: Fan status output was not same after/before device vc-switch over. Product-Group=junos	In a QFX51200-48YM-8C VC setup, after a a mastership switch over fan tray of linecard may not be displayed in show chassis hardware and show chassis environment. There is no functional impact Resolved In:
PR Number	Synopsis	Category: SSL Proxy functionality on JUNOS
1863878 Major	Mismatch between CLI error message and netconf error message - leads to unclear error message displayed to customers Product-Group=junos	There is no traffic impact due to this PR. The config commit error message that is displayed when netconf is used is different from the one that we get when CLI commands are used. This is not specific to SSL Proxy and same issue applies to some other config commands as well. Resolved In:
PR Number	Synopsis	Category: ZT/YT pfe infra issues
1885754 Major	MX304 acting as an LNS saw an FPC restart and core dump in aft-trio after offlining a MIC Product-Group=junos	MX304 acting as an LNS saw an FPC restart and core dump in aft-trio after offlining a MIC Resolved In:
PR Number	Synopsis	Category: Configuration mgmt, ffp, load-action, commit processing
1751574 Major	Netconf RPC commit fails due to commit warning received for unprotect operation, CLI commit completes with warning Product-Group=junos	In Netconf private edit configuration session, commit RPC fails when unprotect operation is performed. Resolved In:
PR Number	Synopsis	Category: UI Infrastructure - mgd, DAX API, DDL/ODL
1593200 Critical	Junos OS: A low privileged user can elevate their privileges to the ones of the highest privileged J-Web user logged in Product-Group=junos	A Generation of Error Message Containing Sensitive Information vulnerability in the CLI of Juniper Networks Junos OS allows a locally authenticated attacker with low privileges to elevate these to the level of any other user logged in via J-Web at this time, potential leading to a full compromise of the device. Refer to https://kb.juniper.net/JSA11270 [juniper.net] for more information. Resolved In: evo:21.1R2-S1-EVO evo:21.2R1-S2-EVO evo:21.2R2-EVO evo:21.2R3-EVO evo:21.3R1-EVO evo:21.3R2-EVO evo:21.4R1-EVO junos:15.1R7-S11 junos:18.3R3-S6 junos:18.4R2-S9 junos:18.4R3-S10 junos:19.1R2-S3 junos:19.1R3-S7 junos:19.2R1-S8 junos:19.2R3-S4 junos:19.3R3-S4 junos:19.4R3-S6 junos:20.1R3-S2 junos:20.2R3-S3 junos:20.3R3-S1 junos:20.3X75-D442 junos:20.4R3-S1 junos:21.1R2-S1 junos:21.1R3 junos:21.2R1-S1 junos:21.2R2 junos:21.2R3 junos:21.3R1 junos:21.3R2 junos:21.4R1
1842868 Major	XML namespace string in rpc-reply tag for system-uptime-information was changed to represent the full version name. Product-Group=junos	XML namespace string in rpc-reply tag for system-uptime-information was changed to represent the full version name. Resolved In: evo:24.4R2-EVO evo:25.1R1-EVO junos:23.4R2-S4 junos:24.2R2 junos:24.4R2 junos:25.1R1
PR Number	Synopsis	Category: Issues related to YANG Data Models
1781023 Minor	Few yang package are occuring multiple place On Box Product-Group=junos	Few yang package are occuring multiple place On Box Resolved In:

Modification History

DRAFT 2025-06-25