Alert Type

SRN - Software Release Notification

Product Affected

MX, PTX, vMX, vRR, Network Agent

Alert Description

Junos Software Service Release version is now available for download from the Junos software download site
Download Junos Software Service Release:
  1. Go to Junos Platforms - Download Software page
  2. Input your product in the "Find a Product" search box
  3. From the Type/OS drop-down menu, select Junos SR
  4. From the Version drop-down menu, select your version
  5. Click the Software tab
  6. Select the Install Package as need and follow the prompts

Solution

Junos Software service Release version 16.1R3-S11 is now available.

The following are incremental changes in 16.1R3-S11.

 
PR Number Synopsis Description
1183181

MX series SRX series: Junos OS: Denial of service vulnerability in Flowd on devices with ALG enabled. (CVE-2018-0002)

MX Series SRX Series: Junos OS: Denial of service vulnerability in Flowd on devices with ALG enabled. (CVE-2018-0002); Refer to https://kb.juniper.net/JSA10829 [juniper.net] for more information.

1263748

After JSD (JET service process) restart, the process is up but it is not listening on any port

After router reboot or JSD (JET service process) process crash, sometimes the listening socket for JSD (JET service process) is not operational.

1265548

Traffic drop on MPC with "Link sanity checks" and "Cell underflow" errors

When certain hardware transient failures occur on an MQ-chip based MPC, traffic might be dropped on the MPC, and syslog errors "Link sanity checks" and "Cell underflow" are reported. There is no major alarm or self-healing mechanism for this condition.

1275021

The FPC card might crash when a route is received via BGP and sampled through JFlow

When a route is received via BGP (Border Gateway Protocol), each AS (Autonomous System) path is assigned an AS index by the router. Normally the AS table of FPC have all the AS index information. When a route is assigned an AS index which is not exist in the AS table, the FPC might crash when lookup the AS index in the AS table and can not find it.

1326394

JSA10885 [juniper.net] 2018-10 Security Bulletin: Junos OS: Denial of Service vulnerability in MS-PIC, MS-MIC, MS-MPC, MS-DPC and SRX flow daemon (flowd) related to SIP ALG (CVE-2018-0051)

Junos OS: Denial of Service vulnerability in MS-PIC MS-MIC MS-MPC MS-DPC and SRX flow daemon (flowd) related to SIP ALG (CVE-2018-0051); Refer to https://kb.juniper.net/JSA10885 [juniper.net] for more information.

1343195

JSA10898 [juniper.net]: 2018-10 Security Bulletin: Junos OS: Multiple vulnerabilities in NTP [VU#961909]

Multiple vulnerabilities in NTP have been resolved in Junos OS. Refer to JSA10898 [juniper.net] for more information.

1347361

JSA10874 [juniper.net] 2018-07 Security Bulletin: Junos OS: cURL: Multiple vulnerabilities in multiple cURL versions

Multiple vulnerabilities in cURL and libcurl have been resolved in Junos OS. Refer to JSA10874 [juniper.net] for more information.

Modification History

First publication date 2019-02-15