Alert Type

SRN - Software Release Notification
Low/NotificationSoftware Release Notification
Low/NotificationSoftware Release Notification

Product Affected

ACX PTX QFX running Junos Evolved software

Alert Description

Junos Software Service Release version 22.4R3-S9-EVO is now available for download from the Junos software download site

Download Junos Software Service Release:

  1. Go to Junos Platforms - Download Software page
  2. Input your product in the "Find a Product" search box
  3. From the Type/OS drop-down menu, select Junos SR
  4. From the Version drop-down menu, select your version
  5. Click the Software tab
  6. Select the Install Package as need and follow the prompts

NOTE: Starting on August 30th, 2024, we include PR's severity with each entry. See KB86335 [juniper.net] for the definition of PR's Severity

 

Junos Selective Update (JSU) feasible

Not applicable

Call to Action

For review

Solution

Junos Software service Release version 22.4R3-S9-EVO is now available.

22.4R3-S9-EVO - List of Fixed issues

PR NumberSynopsisCategory: Border Gateway Protocol
1914814
Major		BGP task replication will be stuck in 'InProgress' state following an RE switchover when two single hop EBGP sessions are configured on two different interfaces using the IP addresses from the same subnet
Product-Group=evo
Severity=Major		On all Junos OS and Junos OS Evolved platforms with NSR (Nonstop Active Routing), when two single hop EBGP (External Border Gateway Protocol) sessions are configured to run on two different interfaces using IP addresses from the same subnet (overlapping subnet), the BGP task replication process does not complete after an RE (Routing Engine) switchover for the EBGP session with a specified local-address. This results in one BGP peer being in the 'Idle' state on the Backup RE while remaining in the 'Established' state on the new Master RE, causing the BGP task replication process to remain stuck in the 'InProgress' state.
PR NumberSynopsisCategory: PFE COS features on BT based platforms
1856528
Major		Missing traffic statistics via telemetry on PTX EVO platforms with MPC10E, MPC11E, and LC9600 line cards
Product-Group=evo
Severity=Major		On PTX EVO platforms equipped with MPC10E, MPC11E, or LC9600 line cards, when telemetry monitoring is enabled and the sensor /junos/system/linecard/interface/traffic/ is subscribed to, some entries for interface traffic statistics might be missing. This occurs due to an issue where the volume of telemetry data per interface can lead to message fragmentation, resulting in incomplete data export.
PR NumberSynopsisCategory: QFX Access Control related
1896371
Major		Junos OS and Junos OS Evolved: Use after free vulnerability In 802.1X authentication daemon can cause crash of the dot1xd process (CVE-2026-21908)
Product-Group=evo
Severity=Major		A Use After Free vulnerability was identified in the 802.1X authentication daemon (dot1xd) of Juniper Networks Junos OS and Junos OS Evolved that could allow an authenticated, network-adjacent attacker flapping a port to crash the dot1xd process, leading to a Denial of Service (DoS), or potentially execute arbitrary code within the context of the process running as root. Please refer to https://supportportal.juniper.net/JSA106007 [juniper.net] for more information.
PR NumberSynopsisCategory: EVO ARP related PRs
1835158
Major		Traffic loss during ARP re-learning in scaled environments due to ARP retry throttling
Product-Group=evo
Severity=Major		On all Junos OS Evolved platforms, In large-scale deployments with many Address Resolution Protocol (ARP) entries, a Graceful Routing Engine Switchover (GRES) or Virtual Local Area Network (VLAN) or sub-interface flap triggers an ARP table flush and re-learn. ARP retry throttling during this phase can cause traffic loss.
PR NumberSynopsisCategory: Issues related to debug utilties - objmon, objshell/Dashboard
1838074
Minor		Serial Console Stops Working After Cable Reconnection
Product-Group=evo
Severity=Minor		On Junos OS Evolved platforms, the serial console may stop functioning, displaying a blank output, after one or more physical disconnections and reconnections of the console cable. The use of intermediate cable adapters or unreliable cables can exacerbate this issue.
PR NumberSynopsisCategory: EVO L2 Control Plane PRs
1889335
Minor		Traffic drop is observed in an EVPN multihoming as the MAC route points to the ESI interface when the CE (ESI) IFD flaps
Product-Group=evo
Severity=Minor		On all Junos and Junos Evolved platforms, in an Ethernet Virtual Private Network (EVPN) MultiHoming setup with Ethernet Segment Identifier (ESI) configured under logical Interface (IFL) (CE-facing), when the corresponding IFD (Physical Interface) flaps, the MAC route will point to the ESI interface, while it should point to the Multihoming CE (Customer Edge) interface. This results in traffic loss.
1899530
Major		MAC learning failure when moving the AE interface from one VLAN to another VLAN in a single commit
Product-Group=evo
Severity=Major		On Junos OS Evolved platforms, when an Aggregated Ethernet (AE) logical interface (IFL) is moved from one Virtual LAN (VLAN) to another VLAN in a single commit, Layer 2 forwarding tables fail to update correctly. This causes Media Access Control (MAC) learning failure and traffic disruption.
PR NumberSynopsisCategory: Lacp related problems and issues.
1898531
Major		AE interfaces flap during GRES following an RE reboot on all Junos Evolved platforms
Product-Group=evo
Severity=Major		On all Junos Evolved platforms, Aggregate Ethernet (AE) interfaces with LACP configured will experience a flap due to a timing issue when Graceful Routing Engine Switchover (GRES) is performed after a Routing Engine (RE) reboot, resulting in traffic loss during the flap.
PR NumberSynopsisCategory: EVO linux defects & enhancement requests
1892248
Minor		Junos OS Evolved: A Linux kernel vulnerability in the HID driver allows an attacker to read information from the HID Report buffer (CVE-2024-50302)
Product-Group=evo
Severity=Minor		A Use of Uninitialized Resource in the Linux kernel driver for Human Interface Devices (HID) in Junos OS Evolved allows a local low-privileged attacker to use a malicious input device to read information from the report buffer. This could be used to leak kernel memory, enabling the exploitation of additional vulnerabilities. Please refer to https://supportportal.juniper.net/JSA106000 [juniper.net] for more information.
PR NumberSynopsisCategory: Express ptx-evo PFE L3 Features
1800651
Critical		Unilist nexthop missing after switchover followed by FPC restart
Product-Group=evo
Severity=Critical		On all Junos Evolved platforms, after a NSR Switchover (Nonstop Active Routing switchover) followed by an FPC restart, the system will fail to retrieve some unilist next-hops. This failure causes a continuous drop in traffic for some destinations because the restarted FPC is missing next-hop information for ECMP.
PR NumberSynopsisCategory: SNMP, mib2d issues
1815524
Major		The mib2d crash is observed on Junos OS Evolved platforms with duplicate SNMP request
Product-Group=evo
Severity=Major		On Junos OS Evolved platforms, the mib2d process crashes when SNMP get request is performed for duplicate OIDs.
1836012
Minor		The mib2d memory increase observed during 24 hours testing
Product-Group=evo
Severity=Minor		On all Junos OS Evolved platforms, mib2d memory leak may be observed when querying ip, tcp, udp, jnxIpv6GlobalStats and jnxIcmpv6GlobalStats scalar mib objects.
PR NumberSynopsisCategory: lldp sw on MX platform
1900111
Major		In Fusion Provider Edge deployments, aggregator does not establish LLDP neighborship with satellite interfaces
Product-Group=evo
Severity=Major		In Junos Fusion Provider Edge deployment, when satellite device is rebooted and subsequently LLDP is enabled on a satellite interface, it does not transmit Link Layer Discovery Protocol (LLDP) packages on the enabled interface resulting in the LLDP neighborship not being established and LLDP-MED (Media Endpoint Discovery), an extension of LLDP, stopping working and causing any Voice over IP phones connected to the interface to lose connectivity
PR NumberSynopsisCategory: Port-based link layer security services and protocols that a
1911538
Major		Show command execution failure for show system macsec license on MX platforms
Product-Group=evo
Severity=Major		On all Junos MX10004, MX10008, MX304, MX301 platforms on executing the command "show system maces license" fails and doesn't fetch any information however it doesn't cause any service disruption. This is a Day-1 issue.
PR NumberSynopsisCategory: RPD route tables, resolver, routing instances, static routes
1807037
Major		BGP backup routes are installed as primary routes after enabling 'protect core' feature
Product-Group=evo
Severity=Major		On all Junos and Junos OS Evolved platforms when Border Gateway Protocol (BGP) multipath is enabled for Layer 3 Virtual Private Network (L3VPN) routes and 'protect core' is enabled on the Virtual Routing and Forwarding (VRF) instance, the backup BGP path is installed as primary path. The Next hop weight value is not updated correctly, it is weight 0x1 instead of weight 0x4000 for the backup.
1907558
Major		The rpd process crashes in a vrf having EVPN-VXLAN routes with specific configuration.
Product-Group=evo
Severity=Major		In all Junos and Junos OS Evolved platforms, when EVPN-VXLAN (Ethernet Virtual Private Network-Virtual Extensible LAN) routes are present in a VRF (Virtual Routing and Forwarding), configuring a generate route in same vrf can cause rpd (Routing Protocol Daemon) to crash and restart. Generate route configuration has to be removed to recover from this behaviour.

 

 

22.4R3-S9-EVO - List of Known issues

PR NumberSynopsisCategory: mgd, ddl, odl infra issues
1839955
Major		On Junos OS Evolved platforms, HTTPS download fails when HTTPS URL is present in the configuration
Product-Group=evo		On Junos OS Evolved platforms, when HTTPS URL is present as a part of file or mentioned explicitly in the configuration, and when there is a download attempted through this file the download fails. However, this is will not impact the forwarding traffic only the download through HTTPS will fail.

Resolved In: evo:22.3X80-D49-EVO evo:23.4R2-S3-C1-EVO evo:23.4X100-D30-EVO evo:24.2R2-S1-EVO evo:24.4R1-S2-EVO evo:24.4R2-EVO evo:25.2R1-EVO junos:23.2R2-S3-C21 junos:23.4R2-S4 junos:23.4X1 junos:23.4X30-D20 junos:23.4X30-D30 junos:24.2R2-S1 junos:24.2X1 junos:24.4R1-S2 junos:24.4R2 junos:25.2R1
PR NumberSynopsisCategory: OSPF routing protocol
1867120
Major		IPSEC OSPF3 realm sessions do not stay UP
Product-Group=evo		IPSEC OSPF3 realm sessions do not stay UP when you have the same interface configured in both ospf3 realm and non-realm. When the aggregate interface goes down for any reason (physical link issue or something else) when it recovers the realm session will not come back online.

Resolved In: evo:24.2R2-S4-EVO evo:25.3R1-EVO junos:25.3R1