Junos Software service Release version 16.2R2-S9 is now available.
The "show system users" CLI output displays users who are not using the router
The 'show system users' CLI output displays users who are not using the router. The 'request system logout' CLI command cannot clear the stale telnet sessions. This is a cosmetic issue, because 'show system connection' and the CLI process show only the current session.
EVPN traffic mapping to specific LSPs not working
The policies that map EVPN (Ethernet Virtual Private Network) traffic to specific LSPs (Label Switched Paths) based on community matching do not work properly.
Junos OS: Specially crafted packets sent to port 111 on any interface triggers responses from the management interface (CVE-2019-0040)
Junos OS: Specially crafted packets sent to port 111 on any interface triggers responses from the management interface (CVE-2019-0040); Refer to https://kb.juniper.net/JSA10929 [juniper.net] for more information.
With Resource Certification (RPKI) enabled, RPD successive crashes during route validation DB processing
In JUNOS with Resource Certification (RPKI) enabled for BGP Route Origin validation, in some scenarios successive RPD crashes generated with route validation DB processing enabled due to buffering issues in string, generating the coredumps due to invalid pointer.
BGP prefixes with three levels of recursion for resolution will get stuck with a stale next-hop at the first level after a link down event
BGP prefixes with three levels of recursion for resolution will get stuck with a stale next hop at the first level after a link-down event, even though the second and the third level routes have updated next hops.
The validation replication database sometimes shows much more entries than the validation database after restarting the RPKI cache server
In RPKI (Resource Public Key Infrastructure) scenario, the validation replication database might have much more entries than the validation database after restarting RPKI cache server and the validation session is reestablished.
When forwarding-class-accounting knob is enabled, on an interface, inside of a routing-instance of instance-type vrf, aggregate input forwarding-class statistics do not increment (egress statistics work fine).
The receivers belonging to a routing instance may not receive multicast traffic in an Extranet next-generation MVPN scenario
In an Extranet next-generation MVPN scenario, a rare corner issue may be observed that the multicast traffic may not be forwarded to the receivers to a routing instance.
Junos OS: Firewall filter terms named "internal-1" and "internal-2" being ignored (CVE-2019-0036)
Junos OS: Firewall filter terms named "internal-1" and "internal-2" being ignored (CVE-2019-0036); Refer to https://kb.juniper.net/JSA10925 [juniper.net] for more information.
Junos OS: BGP packets can trigger rpd crash when BGP tracing is enabled. (CVE-2019-0019)
Junos OS: BGP packets can trigger rpd crash when BGP tracing is enabled. (CVE-2019-0019); Refer to https://kb.juniper.net/JSA10931 [juniper.net] for more information.
First publication 2019-04-17