Alert Type

SRN - Software Release Notification
Low/NotificationSoftware Release Notification
Low/NotificationSoftware Release Notification

Product Affected

ACX PTX QFX running Junos Evolved Software

Alert Description

Junos 23.2R2-S7-EVO images have been recalled and replaced with 23.2R2-S7.7-EVO on 2026-10-14

Please evaluate the new images. See the attachment for additional fixes included in the new image.

Junos Software Service Release version 23.2R2-S7-EVO is now available for download from the Junos software download site

Download Junos Software Service Release:

  1. Go to Junos Platforms - Download Software page
  2. Input your product in the "Find a Product" search box
  3. From the Type/OS drop-down menu, select Junos SR
  4. From the Version drop-down menu, select your version
  5. Click the Software tab
  6. Select the Install Package as need and follow the prompts

NOTE: Starting on August 30th, 2024, we include PR's severity with each entry. See KB86335 [juniper.net] for the definition of PR's Severity

 

Junos Selective Update (JSU) feasible

Not applicable

Call to Action

For your review

Solution

Junos Software service Release version 23.2R2-S7-EVO is now available.

23.2R2-S7-EVO - List of Fixed issues

PR NumberSynopsisCategory: "agentd" software daemon
1929823
Major		The sysd process crashes with error logs upon exceeding its memory limit
Product-Group=evo
Severity=Major		On Junos OS Evolved platforms with telemetry streaming configured, the sysd (System Daemon) process crashes on the backup RE (Routing Engine), and error logs are observed when sysd memory usage continues to grow over time, and the memory limit is exceeded. This issue is observed when the 64-bit sysd consumes more memory than the configured system limit when the device has been running for a long time (typically more than 100 days) in the dual RE scenario.
PR NumberSynopsisCategory: Border Gateway Protocol
1880630
Major		Some BGP sessions remain in the Idle state after all interfaces are deactivated and rollback is issued
Product-Group=evo
Severity=Major		On all Junos and Junos OS Evolved platforms, after all the interfaces are deactivated and the rolled back, some BGP sessions stay in Idle state. This will impact the traffic.
1915893
Major		The rpd process crash triggered by LLGR stale timer expiry and late reconnection of unconfigured BGP peer on helper node
Product-Group=evo
Severity=Major		On all Junos OS and Junos OS Evolved, when Long-Lived Graceful Restart (LLGR) is configured and a Border Gateway Protocol (BGP) neighbor goes down and reconnects after the LLGR stale timer expires, the Routing Protocol Daemon (rpd) process crashes leading to service disruption.
1935730
Major		BGP session teardown due to incorrect 'prefix-limit maximum exceeded' error when RIB sharding is enabled
Product-Group=evo
Severity=Major		On all Junos and Junos OS Evolved platforms, when prefix-limit or accepted-prefix-limit is configured under family route-target with rib-sharding, prefix-limit will be incorrectly reported as 'prefix-limit maximum is exceeded'. This causes the BGP session to go down immediately. This occurs because the system incorrectly counts each received route multiple times (once for the main thread and once for each shard)
PR NumberSynopsisCategory: PFE L2 forwarding features on BT based platforms
1890878
Major		On PTX EVO platforms in EVPN-VXLAN scenario traffic will not egress out of the irb next-hop when the bridge-domain doesn't have VXLAN VNI configured
Product-Group=evo
Severity=Major		On all PTX Evolved platforms that support EVPN-VXLAN (Ethernet VPN-Virtual Extensible LAN), when the PTX router acts as a MAC-VRF (Media Access Control - Virtual Routing and Forwarding) EVPN gateway, it will fail to forward traffic routed through the 'irb' interface due to packets being discarded at PFE (packet forwarding Engine), causing packet loss.
PR NumberSynopsisCategory: QFX Control Plane VXLAN
1921796
Minor		Traffic dropped after priority change in VRRP with EVPN-VxLAN scenario
Product-Group=evo
Severity=Minor		On all Junos and Junos Evolved platforms, in Virtual Router Redundancy Protocol (VRRP) with Ethernet Virtual Private Network - Virtual Extensible Local Area Network (EVPN-VXLAN) scenario, when VRRP priority is changed, the VRRP virtual Media Access Control (MAC) address can remain pinned as a static entry on the remote device. As a result, MAC movement does not occur correctly, and VRRP packets are dropped on the leaf device. This impacts VRRP operation after priority changes.
PR NumberSynopsisCategory: EVO ARP related PRs
1798446
Major		Traffic drop due to ARP not update when changing the MAC address with the same IP address on all Junos OS Evolved platforms
Product-Group=evo
Severity=Major		On all Junos OS Evolved platforms, while changing the MAC (Media Access Control ) address on the peer side, the traffic drop will be observed if route is in non-default table.
1934771
Minor		PyEZ Issue, failing on RPC request "show arp interface <>" to EVO platforms
Product-Group=evo
Severity=Minor		On all Junos Evolved platforms, on invalid interface fetching, display error is seen on "show arp interface <>" command.
PR NumberSynopsisCategory: Issues related to evo operations - libevo infra, typeinfo ..
1874238
Major		EVO resource leak due to a problem on objmon
Product-Group=evo
Severity=Major		objmon running on routing-engine never releases net:: juniper:: evlruntime:: indexrelease:: IndexReleaseConfirm objects that were generated by several applications, which causes SDB memory exhaustion. This is tracked under TSB107540 [juniper.net]
PR NumberSynopsisCategory: EVO Netstack Juniper Tunnel Driver Module
1919313
Major		The LDP session does not come up when an IPsec SA is configured under OSPFv3
Product-Group=evo
Severity=Major		On Junos Evolved platforms, when Open Shortest Path First version 3 (OSPFv3) Internet Protocol Security (IPsec) SA is applied at the interface (IFD/IFL) level, Label Distribution Protocol (LDP) is able to discover the neighbor via User Datagram Protocol (UDP) Hellos, but fails to bring up the Transmission Control Protocol (TCP) session, preventing the LDP session from becoming operational. Disabling the OSPFv3 IPsec SA immediately restores normal LDP operation. During the service impact, the session will be down and traffic will not be send. Once the LDP session comes up, traffic can be routed through it.
PR NumberSynopsisCategory: PRs related to software Agentd daemon on EVO
1833235
Major		Few apps failed to restart after the installation of EVO-JSU image with knob restart
Product-Group=evo
Severity=Major		On all Junos Evolved platforms, few apps failed to restart after the installation of EVO-JSU image with knob restart.
PR NumberSynopsisCategory: EVPN Layer-2 Forwarding
1916646
Major		IRB interface state is observed incorrect on IFD events tracked by a Network Isolation group
Product-Group=evo
Severity=Major		On MX, EX9200, QFX, PTX platforms, Traffic forwarded over the IRB (Integrated Routing and Bridging) is impacted when isolation decisions rely on the state of a tracked interface, because the Network Isolation Group tracks the interface but processes only IFL (Interface Logical) events and does not process IFD (Interface Device) events.
PR NumberSynopsisCategory: Enhanced Broadband Edge support for firewall
1928462
Major		FPC crash occurs after configuration changes are made to a service-filter on specific MX platforms
Product-Group=evo
Severity=Major		FPC crash and aftd-trio core-dump will be observed on MX platforms supporting MPC10E, MPC11E, LC9600 line cards, and MX304 after configuration changes were made to a service-filter which was in use by BBE subscribers.
PR NumberSynopsisCategory: ACX7509 Linecard (FPC) related issues
1931077
Major		CRC errors and packet loss are being observed at the peer device when using 1G fibre optic connections
Product-Group=evo
Severity=Major		On Junos OS Evolved ACX7509, ACX7348, ACX7332, and ACX7100-32C platforms with 1G fibre Optics, when the Inter-Packet Gap (IPG) setting intermittently falls below the IEEE minimum requirement of 8 bytes, and traffic passes through the PHY, certain receiving devices are sensitive to this reduced IPG, which leads to CRC (Cyclic Redundancy Check) errors and packet loss on the peer device connected to 1G fibre optics connection.
PR NumberSynopsisCategory: jdhcpd daemon
1927449
Major		Jdhcpd cores generated after upgrade
Product-Group=evo
Severity=Major		jdhcpd cores seen after upgrade with dhcpv6 for IANA/PD
PR NumberSynopsisCategory: Layer2 forwarding on EX/NFX/PTX/QFX
1816344
Major		EVPN : Traffic failure after multiple link flaps of core facing interfaces on scaled setup
Product-Group=evo
Severity=Major		ARP resolution failure when there is quick flap of core facing interface on scaled setup
1928530
Critical		A buffer overflow during IPv6 NDP operations in an EVPN environment caused segmentation faults leading to FPC crash files and repeated reboots
Product-Group=evo
Severity=Critical		On JunOS MX240/MX480/MX960/MX2008/MX2010/MX2020 platforms with MPC10E/MPC11E line cards as well as the MX304 platform, an issue in IPv6 EVPN (Ethernet Virtual Private Network) during NDP (Neighbor Discovery Protocol) resolicitation of a link local target address causes the system to use the IRB link local address in outgoing packets. Stack corruption happens when handling the IRB link local address and resulting in continuous FPC (Flexible PIC Concentrator) reboots (around 3 or 4 times) and crash files generation.
PR NumberSynopsisCategory: RPD route tables, resolver, routing instances, static routes
1815837
Minor		Configure low file size in traceoptions while logging volume is high will lead to high CPU and RPD scheduler slips causing operational impact
Product-Group=evo
Severity=Minor		If the file size is too small and the amount of traceoptions volume is too high it can cause scheduler slips and operational impact.
PR NumberSynopsisCategory: RPD API infrastructure
1715599
Critical		Inconsistent RPD crash found in rt_walk, task_job_run_job_bg, task_scheduler
Product-Group=evo
Severity=Critical		PRPD installed flowspec routes were not deleted on routing-instance delete, leading to RPD crash.
PR NumberSynopsisCategory: Issues related to broadband edge apps (PPP, DHCP) on ZT/YT
1927107
Major		FPC might crash with high scale of BBE subscriber
Product-Group=evo
Severity=Major		On MX304 and MX platforms with MPC10, MPC11, or LC9600, the Flexible PIC Concentrator (FPC) might crash when operating with a high scale of Broadband Edge (BBE) subscriber.
PR NumberSynopsisCategory: Configuration management, ffp, load action
1854461
Major		Configured TFTP server connection and rate limits are not applied
Product-Group=evo
Severity=Major		On all Junos and Junos Evolved platforms configured as Trivial File Transfer Protocol (TFTP) server , "connection-limit" or "rate-limit" values are not updated as per configured values.
PR NumberSynopsisCategory: Virtual Private LAN Services
1806424
Major		The snmp mib walk on jnxVplsPwBindTable fails with vpls routing-instances having multiple mesh-groups
Product-Group=evo
Severity=Major		If VPLS mesh-groups are configured with different neighbours having different vpls-id the SNMP mib walk over jnxVplsPwBindTable might fail with the error Request failed: OID not increasing. No functional impact is seen due to this issue.

 

 

23.2R2-S7-EVO - List of Known issues

PR NumberSynopsisCategory: Border Gateway Protocol
1875834
Major		On switchover on ACX7509, L3VPN some of the prefixes traffic hit is around 1-5secs
Product-Group=evo		On switchover on ACX7509, L3VPN some of the prefixes traffic hit is around 1-5secs. Some of the prefixes seen traffic drop in terms of seconds after NSR switchover and issue is not consistent. It is not a continuous traffic drop and it recovers.

Resolved In:
PR NumberSynopsisCategory: PFE L2 forwarding features on BT based platforms
1928605
Minor		IRB routed traffic is dropped when both hosts are learned on the same SP-style Layer 2 interface on EVO-PTX platforms
Product-Group=evo		On all Junos OS Evolved PTX platforms, IRB (Integrated Routing and Bridging) routed traffic is dropped when both source and destination hosts are reachable through the same Service Provider (SP)-style Layer 2 IFL (Logical Interface) and associated IRB interface.

Resolved In: evo:24.2R2-S5-EVO evo:25.4R1-S3-EVO evo:25.4R2-EVO evo:26.2R1-EVO
PR NumberSynopsisCategory: Layer 3 forwarding, both v4+v6
1927637
Major		IPv6 frames are incorrectly padded
Product-Group=evo		On all EVO ACX platforms ACX7100-32C/ACX7100-48L/ACX7024/ACX7509/ACX7348/ACX7908, IPv6 frames are incorrectly padded with 0's ethernet/vlan padding (trailer) while sending to the peer device. In our incidence, GTP transit frames with these added paddings are dropped by the sGW (Serving Gateway) which causes service disruption. 5G mobility signaling will be impacted due to this issue.

Resolved In: evo:23.4R2-S8-EVO
PR NumberSynopsisCategory: UI Infrastructure - mgd, DAX API, DDL/ODL
1704886
Critical		Junos OS and Junos OS Evolved: Specific low privileged CLI command exposes sensitive information (CVE-2026-33776)
Product-Group=evo		A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS and Junos OS Evolved allows a local user with low privileges to read sensitive information. Please refer to https://supportportal.juniper.net/JSA107866 [juniper.net] for more information.

Resolved In: evo:23.2R2-S4-J2-EVO evo:23.4R2-S4-J2-EVO evo:23.4R2-S5-J18-EVO evo:23.4R2-S6-EVO evo:24.4R2-S1-EVO evo:24.4R2-S1-J1-EVO evo:25.2R2-EVO evo:25.4R1-EVO junos:20.3X75-D443 junos:21.2R3-S11 junos:21.2X33 junos:21.4R3-S10-J4 junos:21.4R3-S10-J4-X1 junos:21.4R3-S10-J6 junos:21.4R3-S12 junos:22.4R3-S7-J1 junos:22.4R3-S8 junos:22.4X50 junos:22.4X8 junos:23.2R2-S3-J20 junos:23.2R2-S5 junos:23.2R2-S6 junos:23.4R2-S4-J26 junos:23.4R2-S4-J27 junos:23.4R2-S5-J17 junos:23.4R2-S6 junos:23.4X12 junos:23.4X13 junos:23.4X30-D30 junos:23.4X7 junos:23.4X9 junos:24.2R2-S4 junos:24.2X1 junos:24.2X4 junos:24.2X50 junos:24.4R2-S1 junos:25.2R1-S1 junos:25.2R1-S2 junos:25.2R2 junos:25.4R1

 

Modification History

First publication date 2026-05-27

Update for recall on 2026-10-14