Alert Type

SRN - Software Release Notification

Product Affected

ACX, SRX, EX, MX, PTX, QFX, NFX

Alert Description

Junos Software Service Release version 19.1R1-S4 is now available for download from the Junos software download site
Download Junos Software Service Release:
  1. Go to  Junos Platforms - Download Software page
  2. Input your product in the "Find a Product" search box
  3. From the Type/OS drop-down menu, select  Junos SR
  4. From the Version drop-down menu, select your version
  5. Click the Software tab
  6. Select the Install Package as need and follow the prompts

Solution

Junos Software service Release version 19.1R1-S4 is now available.

19.1R1-S4 - List of Fixed issues

PR Number Synopsis Category: EX2300/3400 platform
1351757 On EX3400 when me0 ports are connected between 2 EX3400 switches the link does not come up.
  		On Ex3400 when me0 ports are connected between 2 EX3400 switches, the link does not come up. The link comes up when me0 is connected to the network port.
PR Number Synopsis Category: QFX PFE CoS
1433252 The traffic is placed in network-control queue on extended port even if it comes in with different dscp marking
  		In Junos Fusion scenario, when traffic from aggregation device (AD) to satellite device (SD) is exported with different DSCP marking, it might be changed into network-control queue on extended port of SD.
PR Number Synopsis Category: QFX PFE MPLS
1477301 The traffic may be lost over QFX5100 switch acting as a transit PHP node in the MPLS network
  		In the MPLS network, the packets may get dropped by egress node if the packets go through the QFX5100 switch acting as a transit PHP (penultimate-hop popping) node.
PR Number Synopsis Category: common or misc area for SRX product
1430941 Unable to launch J-Web when the device is upgraded through USB image.
  		On SRX series, when the device is upgraded through USB image, J-Web is not available and needs to be installed through "request system software add optional://jweb-srx".
PR Number Synopsis Category: Border Gateway Protocol
1351639 The rpd crashes in JunOS 16.1 or higher during BGP convergence
  		In JunOS 16.1 or higher, during BGP convergence, the input/output thread constructing the outgoing BGP PDU and manipulating the path attributes before hand-off the data to the socket. If this PDU length is zero, it will trigger an assertion and routing-protocol demon is restarting.
PR Number Synopsis Category: MX Platform SW - Mastership Module
1424187 The system does not reboot or halt as configuration when encountering the disk error
  		When the system encounters disk error or halted system (ex. memory leak), the chassisd might go in hung state with the blow error messages even though "disk-failure-action reboot" or "disk-failure-action halt" is configured.
PR Number Synopsis Category: MX Platform SW - UI management
1457657 The chassisd process and all FPCs may restart after RE switchover
  		The chassisd process and all FPCs may restart after RE switchover if the knob "primary-only" is enabled.
PR Number Synopsis Category: OpenSSH and related subsystems
1454177 SSH login might fail if a user account exists in both local database and RADIUS or TACACS+.
  		On SRX Series device, the SSH login from automation tools to the Junos device is not successful when using authentication method password (not 'keyboard-interactive'). If the username is configured both as a local user and also on a remote RADIUS or TACACS server, using the Juniper-Local-User-Name attribute pointing to a different local username.
PR Number Synopsis Category: Control Plane for Node Virtualization
1451215 Main chassisd thread at a JNS GNF could experience stalls upon GNF SNMP polling for hardware-related OIDs
  		- Chassisd main thread stalls could be seen at a JNS GNF upon GNF SNMP polling for HW-related OIDs (e.g. ones from jnxBoaAnatomy MIB). - If a GNF chassisd main thread stalls are ongoing and the GNF is restarted, then a service MGD process at the BSYS could start spinning at 100% CPU. This MGD process won't terminate by itself and will be consuming 100% CPU even when the GNF is back online.
PR Number Synopsis Category: IDP policy
1437569 The flowd or srxpfe process stops and generates core files.
  		On all SRX and vSRX platforms, the flowd/srxpfe process may crash and generate a core dump when upgrading the security package manually.
PR Number Synopsis Category: Kernel software for AE/AS/Container
1412215 Packet drop might be seen if native VLAN is configured along with flexible VLAN tagging
  		When the native VLAN is configured along with the flexible VLAN tagging on a L3 subinterface, untagged packets might be dropped on that L3 subinterface.
PR Number Synopsis Category: Security platform jweb support
1431298 Junos OS: Path traversal vulnerability in J-Web
  		A path traversal vulnerability in the Juniper Networks Junos OS device may allow an authenticated J-web user to read files with 'world' readable permission and delete files with 'world' writeable permission. Refer to https://kb.juniper.net/JSA10985 [juniper.net] for more information.
PR Number Synopsis Category: FreeBSD Kernel Infrastructure
1425608 The kernel crashes when removing mounted USB while a file is being copied to it
  		If you pulled out a USB from the system while files are being copied, the kernel will panic and the system will restart.
1439189 The recovery snapshot cannot be created after system zeroize
  		On EX2300/3400 platforms, the recovery snapshot might not be able to be created after a system zeroize. This is due to certain hardware space limitation over time where there is not enough space to save full snapshot.
1442376 EX2300 platforms might stop forwarding traffic or responding to console
  		On EX2300/EX2300-C platforms, if Junos OS is with FreeBSD kernel version 11 with the build date on or after 2019-02-12, the switch might stop forwarding traffic or responding to console. A reboot is required to restore the service.
1445151 The RE might go to amnesiac mode if there is an older os-package package on an upgraded box
  		On all Junos platforms, if there is an older os-package package exist on an upgraded device, the RE might go to amnesiac mode after a reboot. The os-package is essential when toggling back and forth between 15.1 release and a later release.
1454950 mgd error found during Junos 18.4R2.7 boot up and Junos did not work as expect
  		Packet Forwarding Engine sometimes does not come up after system reboot.Timeout is required to handle the fifo tx/rx error. Debug sysctls are been removed. Mutex been added to handle to race condition.
1469400 Member of virtual chassis might reboot because of lack of watchdog patting
  		In virtual-chassis scenario on EX3400, if watchdog pat did not happen within stipulated time, member (primary or backup or linecard) of virtual chassis might reboot automatically with "0x2:watchdog" as reboots reason.
PR Number Synopsis Category: Periodic Packet Management Daemon
1448670 The connection between ppmd(RE) and ppman(FPC) might get lost due to session timeout
  		Under certain circumstances such as JUNOS VM freeze at the Routing Engine, ppmd to ppman connection might be closed if the session timeout is greater than 3 seconds in either direction. This might lead to flapping of distributed ppm protocol adjacency such as lacp/mBFD.
PR Number Synopsis Category: QFX Platform related (SYSLOG/ALARMS/miscellaneous)
1422958 QFX5100-48T 10G interface might be auto-negotiated at 1G speed instead of 10G
  		QFX5100-48T 10G interface might be auto-negotiated at 1G speed instead of 10G after peer device reboot. This issue will cause link down and impact customer service.
PR Number Synopsis Category: QFX MPLS PFE
1469998 If continuous interface flaps at ingress/egress of PE devices, IP routed packets might be looped on the MPLS PHP node
  		On QFX5K platform, when MPLS node-link-protection is configured on all nodes (PE and P device), the IP routed packets might be looped on the MPLS PHP node (P device) if continuous interface flaps at ingress/egress of PE devices.
PR Number Synopsis Category: Generic platform and infra issues for MS-MIC and MS-MPC(XLP)
1469575 The tcp-log connections fail to reconnect and stuck in "Reconnect-In-Progress" state
  		When MS-MIC becomes unreachable or SPD restart, the nexthop used by tcp-log connection will be set to discard. However the SPD doesn't delete this nexthop and incorrectly continue using this nexthop in PFE. This causes the MS-MIC fail to establish the TCP connection to the syslog server.

Modification History

First publication 2020-01-24