Alert Type

SRN - Software Release Notification

Product Affected

ACX, EX, MX, PTX,QFX, VMX, VRR

Alert Description

Junos Software Service Release version is now available for download from the Junos software download site
Download Junos Software Service Release:
  1. Go to Junos Platforms - Download Software page
  2. Input your product in the "Find a Product" search box
  3. From the Type/OS drop-down menu, select Junos SR
  4. From the Version drop-down menu, select your version
  5. Click the Software tab
  6. Select the Install Package as need and follow the prompts

Solution

Junos Software service Release version 17.2R2-S7 is now available.

The following are incremental changes in 17.2R2-S7.

 
PR Number Synopsis Description
1092009

The rpd might crash when running rpd for a long time

The rpd might crash when running rpd for a long time (such as two years without restart).

1289313

Junos OS: Login credentials are vulnerable to brute force attacks through the REST API (CVE-2019-0039)

Junos OS: Login credentials are vulnerable to brute force attacks through the REST API (CVE-2019-0039); Refer to https://kb.juniper.net/JSA10928 [juniper.net] for more information.

1351503

Dcpfe process might crash on QFX10000 switches.

Dcpfe process might crash on QFX10000 switches when a MAC address entry ages out and the stale bit in the entry is set.

1368067

The authd process might not be started after executing RE switchover on backup RE or without GRES enabled

In a dual Routing Engine (RE) system with the enhanced subscriber management feature enabled, if Graceful Routing Engine Switchover (GRES) is not configured or after executing RE switchover on backup RE, the authd process might not be started.

1368998

Junos OS:set system ports console insecure allows root password recovery on OAM volumes (CVE-2019-0035)

Junos OS: set system ports console insecure allows root password recovery on OAM volumes (CVE-2019-0035); Refer to https://kb.juniper.net/JSA10924 [juniper.net] for more information.

1376060

MS-MPC might have performance degradation under scaled fragmented packets

On MX Series platforms with MS-MPC, it might have performance degradation if the MS-MPC receives scaled fragmented packets.

1399141

Junos OS: BGP packets can trigger rpd crash when BGP tracing is enabled. (CVE-2019-0019)

Junos OS: BGP packets can trigger rpd crash when BGP tracing is enabled. (CVE-2019-0019); Refer to https://kb.juniper.net/JSA10931 [juniper.net] for more information.

1422789

BFD might stuck in slow mode on QFX10002/QFX10008/QFX100016 platform

On QFX10002/QFX10008/QFX100016 platform, if BFD session is configured on fast mode, when the BFD session is across a dual-tagged interfaces (for example QinQ), BFD might switch to slow mode. BFD triggered FRR will have more loss and it takes more time to detect BFD down.

1427090

Heap memory leak might be seen on QFX10000 platforms

On QFX10000 platforms (QFX10002, QFX10008, QFX10016 ), if BFD is configured, heap memory leak will be seen.

Modification History

First publication 2019-05-17