Alert Type

SRN - Software Release Notification
Low/NotificationSoftware Release Notification
Low/NotificationSoftware Release Notification

Product Affected

ACX PTX QFX

Alert Description

Junos Software Service Release version 25.4R1-S1-EVO is now available for download from the Junos software download site

Download Junos Software Service Release:

  1. Go to Junos Platforms - Download Software page
  2. Input your product in the "Find a Product" search box
  3. From the Type/OS drop-down menu, select Junos SR
  4. From the Version drop-down menu, select your version
  5. Click the Software tab
  6. Select the Install Package as need and follow the prompts

NOTE: Starting on August 30th, 2024, we include PR's severity with each entry. See KB86335 [juniper.net] for the definition of PR's Severity

 

Junos Selective Update (JSU) feasible

Not applicable

Call to Action

For your review

Solution

Junos Software service Release version 25.4R1-S1-EVO is now available.

25.4R1-S1-EVO - List of Fixed issues

PR NumberSynopsisCategory: Issues with pluggable optics
1914013
Major		Incorrect optics module fault triggered due to transient I2C read error
Product-Group=evo
Severity=Major		On all Junos OS Evolved platforms and MX platforms with MPC11, LC9600, LC4800 line-cards and MX304, The system encountered a momentary I2C communication issue while reading information from the optics module.Instead of treating it as a brief, recoverable read problem, the software incorrectly classified it as a hardware failure and prematurely marked the optics module as faulty.
PR NumberSynopsisCategory: Fabric for LC1300 and SIB3
1880275
Major		bf_crcv_x_intr_cru_err_pg_psc transient interrupt may occur during FPC offline.
Product-Group=evo
Severity=Major		During link detraining sometimes cru_err_pg_psc interrupt may be present for a very brief time in SIB. Its not a problem if its seen during offline. But should not occur during stable state.
PR NumberSynopsisCategory: BBE UP Session Manager related issues
1916030
Major		L2TP subscriber session failure in BNG CUPS scenario
Product-Group=evo
Severity=Major		On Junos MX platforms and Junos OS Evolved ACX platforms that support BNG CUPS ( Broadband Network Gateway Control and User Plane Separation), L2TP (Layer 2 Tunneling Protocol) subscriber sessions will fail to come up. When this happens, the subscriber session does not bind correctly and no data traffic will pass for the affected subscribers.
PR NumberSynopsisCategory: Border Gateway Protocol
1915893
Major		RPD crashed while stale route LLGR timer expired
Product-Group=evo
Severity=Major		When using BGP-LU with LLGR (Long-Lived Graceful Restart), advertising lo0 addresses as direct peers, while BGP-VPN runs on top of BGP-LU. When the customer shuts down the BGP peer, and the LLGR timer expires, if the RPD tries to bring the connection back up, the RPD process may restart. The issue is due to failing to clean up an unconfigured peer data structure after the LLGR stale timer expires, leaving the peer in the Connect state.
PR NumberSynopsisCategory: Express BX PFE L3 Features
1914948
Critical		Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root (CVE-2026-21902)
Product-Group=evo
Severity=Critical		An Incorrect Permission Assignment for Critical Resource vulnerability in the On-Box Anomaly detection framework of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated, network-based attacker to execute code as root. Please refer to https://supportportal.juniper.net/JSA107128 [juniper.net] for more information.
1917717
Major		IPv4 Family Statistics for subinterfaces streaming as zero
Product-Group=evo
Severity=Major		When the CLI setting "set forwarding-options family inet route-accounting" is enabled to activate IPv4 route accounting statistics, the streaming for /interfaces/interface/subinterfaces/subinterface incorrectly reports all IPv4 counters as zero. This occurs even though IPv4 traffic is successfully forwarded and accounted for in the Packet Forwarding Engine (PFE) .
PR NumberSynopsisCategory: Interface PRs defect & enhancement requests
1911684
Major		IFL installation failure with the same outer VLAN tag and distinct inner VLAN lists
Product-Group=evo
Severity=Major		On all Junos evolved platforms, the logical interface (IFL) installation fails in the Packet Forwarding Engine (PFE) when two or more double-tagged sub-interfaces are configured under the same aggregated ethernet interface with the same outer VLAN tag and distinct inner VLAN lists.
PR NumberSynopsisCategory: EVPN control plane issues
1916656
Major		Incorrect CCC state displayed when IFL or interface status is absent
Product-Group=evo
Severity=Major		On all Junos OS and Junos OS Evolved platforms, When the logical interface (IFL) is not present, the system incorrectly reports the Circuit Cross-Connect (CCC) state as CCC Up. Similarly, when the interface status itself is not available, the pseudowire state is shown as CCC_Up or CCC_Down. The pseudowire state should instead be reported as Not Applicable, since the underlying interface or IFL required to determine a valid CCC state does not exist. Displaying CCC Up/Down incorrectly in the absence of interface.
PR NumberSynopsisCategory: EVPN Layer-2 Forwarding
1926818
Major		ARP resolution failure for /32 static host routes via IRB in EVPN virtual-switch routing instances
Product-Group=evo
Severity=Major		On all Junos and Junos Evolved platforms that support EVPN (Ethernet VPN) virtual-switch routing instances, ARP (Address Resolution Protocol) resolution fails for static host routes configured with a /32 mask when the next-hop interface is an IRB (Integrated Routing and Bridging) interface and the destination host resides in a different subnet. As a result, ARP entries are not installed, MAC (Media Access Control) addresses of destination hosts are not learned, and traffic destined to those hosts becomes unreachable, causing service impact.
PR NumberSynopsisCategory: Express PFE FW Features
1911372
Minor		The evo-aftmand process crashes when the prefix list is modified in scaled scenario
Product-Group=evo
Severity=Minor		On all Junos OS Evolved PTX platforms, a filter installation failure under high prefix utilization leaves the system in an inconsistent internal state, and subsequent modification of prefix lists or prefixes in the filter can further result in incorrect traffic matching and unpredictable packet handling, leading to inconsistent traffic behavior. In rare cases, this internal data corruption may also cause the evo-aftmand process to crash.
PR NumberSynopsisCategory: ACX7509 Linecard (FPC) related issues
1893886
Major		Auto-negotiation mismatches leading to connectivity issues on Junos OS Evolved ACX7509, ACX7332, and ACX7348 platforms
Product-Group=evo
Severity=Major		On Junos OS Evolved ACX7509, ACX7332, and ACX7348 platforms having auto-negotiation is configured on a 1G interface, connectivity issues will occur under certain conditions: system reboots or FPC (Flexible PIC Concentrator) restarts or changes in auto-negotiation settings on the peer side. In these scenarios, ARP (Address Resolution Protocol) resolution will fail due to a mismatch in the auto-negotiation state between the local and peer interfaces. The local interface will incorrectly appear as UP, while the peer interface shows as DOWN, leading to link-level inconsistencies and loss of connectivity.
PR NumberSynopsisCategory: jdhcpd daemon
1911001
Major		On Junos devices supporting subscriber services acting as DHCPv6 relay randomly deletes IA_NA or IA_PD binding/route
Product-Group=evo
Severity=Major		On all Junos devices supporting subscriber services, in case of dual stack DHCP (Dynamic Host Configuration Protocol) subscribers with IA_NA (Identity Association for Non-temporary Address) and IA_PD (Identity Association for Prefix Delegation) bindings with lease times (For the assignment of IPv6 address to a client device), when a client initiates separate renew exchanges for the IA_NA and IA_PD, and once client and DHCP server are in sync with these timers, there can be a race condition at Junos device which is DHCPv6 relay, has not refreshed lease timer and can go out of sync. This can result in deleting IA_NA/IA_PD binding and route to get deleted for that subscriber only. This causes one of the leg for IA_PD or IA_NA to go down for that subscriber, which can result in traffic impact for that leg.

 

 

25.4R1-S1-EVO - List of Known issues

PR NumberSynopsisCategory: PTX10000s Platform Resiliency
1931372
Minor		[PTX10002] When the system is rebooted with "power-optimized" configured, a "FPC 0 Major Errors" alarm is triggered due to a pll_lock_error on the BX chip.
Product-Group=evo		On the PTX10002, when the system is rebooted with the power-optimized setting enabled, a "PLL lock error" may be detected, and an "FPC 0 Major Errors" alarm may be observed.

Resolved In: evo:24.4X200-D20-EVO evo:25.4R2-EVO evo:26.1R1-EVO evo:26.2R1-EVO
PR NumberSynopsisCategory: EVO L3 routing for BCM XGS Platforms
1916275
Critical		QFX5130-32CD :: While deleting the evpn irb vlan scale configuration device is rebooting
Product-Group=evo		QFX5130-32CD :: While deleting the evpn irb vlan scale configuration device is rebooting

Resolved In:
PR NumberSynopsisCategory: Express BT PFE L3 Features
1916954
Major		JDI-REG:VIRTUAL:EVO: Traffic loss was observed during the verification of the traffic test for both ipv4 and ipv6 stream data
Product-Group=evo		Traffic loss was observed during the verification of the traffic test for both ipv4 and ipv6 stream data

Resolved In: evo:25.4R1-S2-EVO evo:25.4R2-EVO evo:26.1R1-EVO evo:26.2R1-EVO junos:25.4R2 junos:26.1R1
PR NumberSynopsisCategory: Host path software for ACX platform
1922793
Major		Error messages are seen on Junos OS Evolved ACX and QFX platforms
Product-Group=evo		On Junos OS Evolved ACX and QFX platforms, when "set system ddos-protection protocol " is configured or ddos-protection configuration is deleted or when "show ddos-protection protocol" is executed then below logs will be seen. DDOS:POLICE: DdosPolicer does not exist DDOS:POLICE: Ddos group does not exist

Resolved In: evo:24.4R2-S4-EVO evo:25.4R2-EVO evo:26.1R1-EVO evo:26.2R1-EVO
PR NumberSynopsisCategory: Zookeeper related issues
1919879
Major		EVO_REG:ACX7509: Observing incomplete object anomalies for dot1xd-agent in net:: juniper:: interfaces:: IFLO
Product-Group=evo		Observing incomplete object anomalies for dot1xd-agent in net:: juniper:: interfaces:: IFLO

Resolved In: evo:25.4X300-EVO evo:26.2R1-EVO junos:26.2R1
PR NumberSynopsisCategory: Interface PRs defect & enhancement requests
1917186
Major		Multicast traffic statistics appears incorrect and brief multicast loss during RE switchover when recursive LDP P2MP FEC is configured
Product-Group=evo		On Junos and Junos OS Evolved platforms with Dual RE (Routing Engine) systems or VC (Virtual Chassis) setup, in an MPLS (Multi-Protocol Label Switch) network along with LDP (Label Distribution Protocol) signalling protocol and P2MP (Point to Multipoint) is used and recursive FEC (Forwarding Equivalence class) is configured such as 'set protocol ldp p2mp recursive fec' on the LER (Label Edge Router)/PE (Provider Edge) device, the multicast traffic statistics doesn't show as expected. Additionally, in the above setup, if there is RE switchover performed or happens due to reason such as component failure, kernel issue on primary RE or the primary RE fails (but not limited to) on the LER / PE the multicast traffic drop is observed. However, the multicast traffic drop happens only during the brief moment of RE switchover. Once the switchover is completed and the label is reprogrammed, the traffic recovers automatically, resulting in minimal traffic loss.

Resolved In: evo:25.4R2-EVO evo:26.1R1-EVO evo:26.2R1-EVO junos:25.4R2 junos:26.1R1
PR NumberSynopsisCategory: eventd, syslog infra issues
1917389
Major		JDI_REG: PTX10008 : DEFENSICS : "master-eventd.re" core is seen without any backtrace during Defensics testing of SSH Suite.
Product-Group=evo		PTX10008 : DEFENSICS : "master-eventd.re" core is seen without any backtrace during Defensics testing of SSH Suite.

Resolved In:
PR NumberSynopsisCategory: EVPN control plane issues
1879311
Major		Transient Traffic Duplication During EVPN Multihomed Spine Reboot in Collapsed EVPN-VXLAN Deployments
Product-Group=evo		On all Junos and Junos OS Evolved platforms with EVPN-VxLAN Multihoming scenario, in EVPN multihomed (ESI) deployments without core isolation, a temporary traffic duplication could occur during a spine reboot or any event that forces forwarding re-convergence.

Resolved In: evo:23.4X100-D40-EVO
PR NumberSynopsisCategory: ACX7348 PTP
1892686
Major		After GRES, in multiple ae scenario, PTP delay message sent from ae0 is received by ae1 in the remote device
Product-Group=evo		After GRES, in multiple ae scenario, PTP delay message sent from ae0 is received by ae1 in the remote device

Resolved In: evo:24.2R2-S5-EVO evo:25.4R1-S2-EVO evo:26.1R1-EVO evo:26.2R1-EVO
PR NumberSynopsisCategory: LC4800 specific Timing software issues
1893122
Major		Hamilton-Lite: Phase jump of around 300ns is seen upon LAG member switchover from secondary to primary on 400G Lag interface with ZR optics
Product-Group=evo		Phase jump of around 300ns is seen upon LAG member switchover from secondary to primary on 400G interface with ZR optics

Resolved In:
PR NumberSynopsisCategory: Category for QFX5K EVO Platform Software PRs related to Inte
1864375
Major		Junk value shown for "Carrier transition" counter
Product-Group=evo		Junk values are shown for Carrier transition counter sometimes on initiating "clear interfaces statistics all" command and picd app restart. This issue is observed on QFX5220-32CD, QFX5230-64CD, QFX5240-64OD.

Resolved In:
1868377
Major		After hitless reboot, "unused" ports remain "Disabled" in HW
Product-Group=evo		To ensure proper functionality of hitless restart/ISSU, do not mark any port as "unused".

Resolved In:
PR NumberSynopsisCategory: QFX5K EVO MACSec
1891444
Critical		JDI:RCT:IPCLOS:glenlivetmacsec:on macsec enabled interface after evo-pfemand restart ping is not working
Product-Group=evo		Glenlivet macsec: on macsec enabled interfaces, after evo-pfemand restart with cli "restart evo-pfemand", ping might not work sometimes.

Resolved In:
PR NumberSynopsisCategory: QFX5K EVO Platform Optic
1900911
Major		Hillside: 16x100G PIC: Commit check added when 40G and 100G xcvrs are put to share a Broadcom serdes core
Product-Group=evo		Hillside: 16x100G PIC: Commit check added when 40G and 100G xcvrs are put to share a Broadcom serdes core

Resolved In:
PR NumberSynopsisCategory: Indirect nexthop routing infrastructure
1928880
Major		traffic shifted and spiked to certain nh in unilist nh during transient state after interface flapped among ecmp
Product-Group=evo		Under scaled scenario, if a new best active lead path in a BGP multipath is coming up, BGP will first tear down the existing multipath, and temporary make the multipath route use the new best path unicast next hop, and also schedule a background job to re-calculate and form the new multpath route, finally make route change to newly formed multipath next hop. During that re-convergence period, transitional traffic spike may be observed in the active path, until all the service routes over the underlay BGP multipath next hop are updated in PFE data path. In the PR test case, AE11 corresponds to the multipath best path egress interface.

Resolved In:
PR NumberSynopsisCategory: PTX10K platform specific fabric PRs
1900242
Critical		Traffic loss seen due to SIB init failures on PTX10016 and PTX10008 platforms
Product-Group=evo		On Junos OS Evolved based PTX10K8 and PTX10K16 platforms, Switch Interface Board (SIB) init failures are observed after system reboot. Traffic loss is seen as SIBs are impacted.

Resolved In: evo:23.2R2-S4-EVO evo:23.2R2-S5-EVO evo:24.4R2-S3-EVO evo:25.3R1-EVO evo:25.4R1-EVO evo:25.4R2-EVO junos:23.2R2-S5 junos:23.4R2-S6 junos:23.4R2-S8 junos:24.2R2-S3 junos:24.4R2-S1 junos:24.4R2-S2 junos:25.2R1-S2 junos:25.2R2 junos:25.4R1 junos:JUNOS_232_R2_S4_EVO_BRANCH