19.2R3-S6: Software Release Notification

Alert Type

PSN - Product Support Notification

RiskRisk Description

Low/Notification

Software Release Notification

ImpactImpact Description

Low/Notification

Software Release Notification

Product Affected

ACX, EX, MX, NFX, PTX, QFX, SRX

Alert Description

Junos Software Service Release version 19.2R3-S6 is now available for download from the Junos software download site

Download Junos Software Service Release:

Go to Junos Platforms - Download Software page
Input your product in the "Find a Product" search box
From the Type/OS drop-down menu, select Junos SR
From the Version drop-down menu, select your version
Click the Software tab
Select the Install Package as need and follow the prompts

Solution

Junos Software service Release version 19.2R3-S6 is now available.

19.2R3-S6 - List of Fixed issues

PR Number	Synopsis	Category: Mojito Platform
1655530	The dc-pfe might crash due to the VCCP flap Product-Group=junos	On all Junos EX and QFX platforms configured with Virtual Chassis (VC), with the Virtual Chassis Control Protocol (VCCP) flaps or any configuration change which causes VCCP to flap, might lead to the process dc-pfe crash.
PR Number	Synopsis	Category: Bug category for Mojito Royale routing implementation
1655654	Few EX platforms does not generate ICMPv6 too big messages Product-Group=junos	Few EX platforms may not generate ICMPv6 too long messages which could cause the path MTU (maximum transmission unit) discovery to fail. As a result, IPv6 session establishment may fail.
PR Number	Synopsis	Category: Category for all the Sazerac & Macallan PFE PRs
1653260	L2PT may not work for AE interfaces in Q-in-Q environment. Product-Group=junos	This issue Affects all EX-2300,EX-3400,EX-4300MP,EX4600,EX4600-40F. L2PT may not work for AE interfaces in Q-in-Q environment.
PR Number	Synopsis	Category: Category for all the Sazerac & Macallan platform related PRs
1649338	The VC port might not be formed automatically after Zeroize Product-Group=junos	On all EX3400/EX4400 platforms, the Virtual-Chassis (VC) port might not be formed automatically after executing the command "request system zeroize".
PR Number	Synopsis	Category: qfx-sw-mclag
1639713	Traffic loss might be seen for the mac addresses learned on the ICL interface Product-Group=junos	On all QFX platforms configured with Multichassis Link Aggregation Groups (MC-LAG), when the Interchassis Link (ICL) and mc-ae interfaces are flapped and BUM traffic is sent to mc-ae, some mac entries are learned on the ICL interface with flag DLR. This may cause traffic loss with certain traffic flow.
PR Number	Synopsis	Category: All issues related to QFX PFE CoS
1650051	The fixed classifier may not work in MPLS and VXLAN scenario Product-Group=junos	On QFX5100 platforms, traffic may not get classified based on a fixed classifier in MPLS as well as the VXLAN scenario.
PR Number	Synopsis	Category: PRs for Sflow on QFX 5100,5200, 5110
1598239	Sflow impacts on ICMP traffic on QFX5XXX platforms Product-Group=junos	On QFX5XXX platforms in sflow scenario, CPU/host bound ICMP traffic from or to the sampled interface might be dropped, which might have impact on services based on ICMP probes like RPM.
PR Number	Synopsis	Category: Covers Application classification workflows apart from custo
1638588	AppID installation failure on the secondary HA node in case of failover Product-Group=junos	On SRX platforms, installation of Application Identification service failed on the secondary HA node in case of failover due to checksum validation.
PR Number	Synopsis	Category: EVPN Layer-2 Forwarding
1586402	The BUM traffic might lose after triggering NSR in EVPN-MPLS or EVPN-ETREE scenario Product-Group=junos	In EVPN-MPLS or EVPN-ETREE scenario, the EVPN allocates an IM label (Inclusive multicast route labels) per VLAN, and the IM labels including the EVI name and VLAN ID are mirrored to the standby RE (routing engine). If disabling/enabling NSR or switching RE mastership with NSR, the l2ad activated in the new master RE might not create the IM next-hop and locally-learned MAC addresses along with new underlay MPLS next-hop created by rpd for the remote EVPN PE, then the remote EVPN PE might be missed from the flood next-hop group on the EVPN instances, it might cause the BUM traffic to lose between the EVPN PEs.
PR Number	Synopsis	Category: jdhcpd daemon
1668015	JDHCPD core found @rcdb_v4_alq_packet_retry_queue_cleanup_tcp_conn after cleanup the pppoe sessions, dhcp and dhcpv6 server binding all Product-Group=junos	JDHCPD core found @rcdb_v4_alq_packet_retry_queue_cleanup_tcp_conn after cleanup the pppoe sessions, dhcp and dhcpv6 server binding all
PR Number	Synopsis	Category: Firewall Network Address Translation
1645039	Datapath daemon might crash resulting in total traffic and service failure Product-Group=junos	On all SRX-Series devices, when policy configuration is modified and committed multiple times while the device is handling MS-RPC traffic with more than 1000 RPC port map entries present in the device, it may result in datapath daemon crash.
PR Number	Synopsis	Category: prs for lacp protocol
1640240	Aggregated Ethernet interface remains up instead of down after deleting loopback and ae interface ip on neighbor while verifying BFD sessions on router Product-Group=junos	Aggregated Ethernet child interfaces with LACP configurations are not timing out even if peer is gone and not sending any bridge protocol data unit (BPDU).
PR Number	Synopsis	Category: This PR category is for tracking only IPv4/ARP/ICMPv4 is
1644616	GARP reply doesn't update ARP entry though gratuitous-arp-reply option is configured. Product-Group=junos	Receiving GARP reply doesn't help update ARP entry though gratuitous-arp-reply option is configured. As a result, traffic loss might be seen depending on the timing.
PR Number	Synopsis	Category: Kernel Multicast Infrastructure
1555274	Multicast traffic in MVPN setup might be blackholed on some PTX platforms acting as transit LSR Product-Group=junos	On PTX3000/PTX5000/PTX10008/PTX10016 platforms in MVPN setup with aggregated Ethernet(AE) having 2 interfaces on 2 different PFE's, if protocol status of one AE member interface goes down (mBFD Down or disabling lacp on the peer), but physical state remains Up, multicast traffic might be blackholed.
1653920	Traffic blackhole might be seen due to next-hop install failure on Junos PTX platforms Product-Group=junos	On Junos PTX platforms there might be a traffic blackhole which happens because of next-hop installation failure for multicast RSVP(Resource Reservation Protocol) P2MP(Point to Multipoint) traffic. This issue might only be encountered in a scaled RSVP P2MP environment after a network event which might cause reconvergence.
PR Number	Synopsis	Category: Kernel MPLS / Tag / P2MP Infrastructure
1654798	RE kernel crash might be observed in the one-hop-LSP MPLS scenario with RE outbound traffic if 'routing-option resolution preserve-nexthop-hierarchy' is configured globally Product-Group=junos	On all Junos platforms, if 'routing-option resolution preserve-nexthop-hierarchy' is configured globally, Routing-engine (RE) kernel crash might be observed in the one-hop-LSP Multiprotocol Label Switching (MPLS) scenario with RE outbound traffic.
PR Number	Synopsis	Category: Kernel Tunnel Interface Infrastructure
1586169	GRE OAM packets are sent through queue 0 with force-control-packets-on-transit-path knob enabled Product-Group=junos	With force-control-packets-on-transit-path knob enabled, the GRE OAM packets are expectedly sent to queue 3 (network control queue), however, the GRE OAM packets are sent to queue 0.
1609630	BFD over GRE tunnel interface stuck in "init" state with GRES enabled Product-Group=junos	On all JUNOS platforms, when disabling the physical interface where GRE tunnels is established and performing a GRES (Graceful Routing Engine Switchover). After GRES, enabling the physical interface will cause BFD to become stuck in init state.
PR Number	Synopsis	Category: Express Paradise PFE L3 Features
1649586	Junos OS: PTX Series: FPCs may restart unexpectedly upon receipt of specific MPLS packets with certain multi-unit interface configurations (CVE-2022-22202) Product-Group=junos	An Improper Handling of Exceptional Conditions vulnerability on specific PTX Series devices, including the PTX1000, PTX3000 (NextGen), PTX5000, PTX10002-60C, PTX10008, and PTX10016 Series, in Juniper Networks Junos OS allows an unauthenticated MPLS-based attacker to cause a Denial of Service (DoS) by triggering the dcpfe process to crash and FPC to restart. On affected PTX Series devices, processing specific MPLS packets received on an interface with multiple units configured may cause FPC to restart unexpectedly. Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. Please refer to https://kb.juniper.net/JSA69706 [juniper.net] for more information.
PR Number	Synopsis	Category: PFE L2
1649637	The local-minimum-links feature not working as expected on QFX5100 VC platforms Product-Group=junos	On the QFX5100 VC(Virtual-Chassis) platform, the AE(Aggregated Ethernet) interface might not go down on a single interface flap in the bundle even though the knob "local-minimum-links" is configured on the device.
1660787	CoS might not get applied on VC ports Product-Group=junosvae	CoS configs are not getting applied on vcp port in QFX5100 VC.
PR Number	Synopsis	Category: PRs for PFE EVPN / VxLAN related issues on QFX5K
1561588	Dcpfe process might crash on after committing EVPN-VXLAN profile configuration and ARP resolution may fail causing traffic issues Product-Group=junos	Dcpfe process might crash on after committing EVPN-VXLAN profile configuration and ARP resolution may fail causing traffic issues.
PR Number	Synopsis	Category: Related to sw defects for K2-RE
1662913	The watchdog timeout is encountered and the system reboots after the 'request system halt' command executed Product-Group=junos	On all platforms with RE-1800 & RE-2000, after the 'request system halt' command is executed, the watchdog timeout is encountered and causes the routing engine (RE) to fail to boot.
PR Number	Synopsis	Category: security-intelligence feature on SRX
1638923	Kernel panic might be seen during boot Product-Group=junos	On Junos platforms kernel panic might be seen during the boot sequence.
PR Number	Synopsis	Category: trinity pfe bridging, learning, stp, oam, irb software
1606731	The FPC might crash if 'flow-table-size' is configured on MX Series routers Product-Group=junos	On MX Series routers, if the statement 'set chassis fpc slot-number inline-services flow-table-size' or 'set chassis fpc slot-number inline-services flex-flow-sizing' is configured, the FPC might crash.
PR Number	Synopsis	Category: Authentication, Authorization, Accounting, PAM (RADIUS/tacpl
1604157	Junos OS and Junos OS Evolved: /var/run/.env files are potentially not deleted during termination of a gRPC connection causing inode exhaustion (CVE-2022-22215) Product-Group=junos	A Missing Release of File Descriptor or Handle after Effective Lifetime vulnerability in plugable authentication module (PAM) of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service (DoS). Please refer https://kb.juniper.net/JSA69719 [juniper.net] for more information.
PR Number	Synopsis	Category: Issues related to Junos Automation, Commit/Op/Event and SLAX
1604622	File download using "request system download" might fail Product-Group=junos	On a EX4400 device, any files scheduled for download using the cli command "request system download" might fail due to error. The files can be downloaded using normal ftp/scp commands on the device.

19.2R3-S6 - List of Known issues

PR Number	Synopsis	Category: Mojito PFE
1671304	Commit fails on EX4300 as EX4600 and EX4300 mixed virtual-chassis is not able to create more than 1024 IFLs Product-Group=junos	Commit check fails on EX4300 when mixed mode virtual-chassis is configured between EX4600 and EX4300 and IFL (logical interface) is created on an aggregate interface having more than 1024 IFLs. Commit failure will be seen.
PR Number	Synopsis	Category: GNATS category to track PRs in Rodnik Platform area
1569230	The 40G DAC connection between EX9253 and the peers might not come up Product-Group=junos	DAC cable might not come up in 40G mode between EX9253 when any interface on PIC0 of FPC 0 or FPC 1 is connected to the peers.
PR Number	Synopsis	Category: Category for all the Sazerac & Macallan PFE PRs
1633883	The EX2300 may unexpectedly drop VOIP VLAN traffic after reboot Product-Group=junos	On the EX2300 platform, the traffic drop may be observed on VOIP VLAN after the device reboot. Voice VLAN on EX2300 may not forward traffic correctly out of the interface when the device is either power-cycled / halted / power off or power on, and may not communicate with the default gateway.
PR Number	Synopsis	Category: Tracking PD specific issues on BRCM platforms running EVO
1545455	The chip on FPC line card might crash when the system reboots. Product-Group=junos	On the FPCs with Broadcom chip, if the jinsightD (health-mon) is not disabled ("set system processes health-mon disable"), the FPC might crash during the system booting. Traffic loss is seen during the FPC crash and restart.
PR Number	Synopsis	Category: JUNOS kernel/ukernel changes for DNX
1537619	On the ACX5448 routers, the Packet Forwarding Engine crashes on the show pfe ifd vty command. Product-Group=junos	In 19.4 release when "show pfe ifd" command executed in the PFE, FPC crash is observed in ACX5448 platform. This issue is addressed in 19.4R2-S2.
PR Number	Synopsis	Category: SNMP, mib2d issues
1669510	The snmpd core might be observed with filter-duplicates configuration Product-Group=junos	On all Junos and EVO platforms configured with filter-duplicates, the snmpd core might be observed if the SNMP query is made simultaneously from NMS (Network Management System) as well from the CLI.
PR Number	Synopsis	Category: Express PFE including evpn, vxlan related issues on QFX10K
1674116	The BFD packets will drop in an EVPN-VxLAN scenario due to incorrect layer3 offset being set in the host path Product-Group=junos	On all QFX10000-60C platforms with Ethernet VPN-Virtual Extensible LAN (EVPN-VxLAN) scenario, the Bidirectional Forwarding Detection (BFD) packets are getting classified as packets of different protocols like Virtual Router Redundancy Protocol (VRRP), depending on the value at an incorrect offset which leads to BFD packet drop.
PR Number	Synopsis	Category: l2 flow module
1599891	OSPF neighbor won't establish under Transparent mode when neighborship across different zone Product-Group=junos	Some of the OSPF neighborship might not able to establish after system bootup when the neigborship connect to SRX via different zone under transparent mode
PR Number	Synopsis	Category: PFE infra to support jvision
1519868	FPC crash might be observed during both deleting and re-applying the configuration Product-Group=junos	On all Junos platforms with telemetry sensor configured, the FPC crash might be observed during both deleting and reaping the configuration (for example, performing back to back GRES). It is a rare issue.
PR Number	Synopsis	Category: prs for lacp protocol
1635935	Traffic loss may be seen on QFX10K due to congestion Product-Group=junos	During congestion PPMAN(Periodic packet management) run short of resource leading to PDUs (Protocol Data Units) getting failed to be sent. Due to PPMAN queue starvation across TX/RX path, LACP sessions may not get a chance to transmit PDUs which can further lead to peer lacp timeout, aggregated ethernet interface flap and traffic loss.
PR Number	Synopsis	Category: OSPF routing protocol
1659366	The memory leak and process rpd crash might be observed when the peer interface flaps continuously in the Segment Routing Product-Group=junos	On all Junos and Junos OS Evolved platforms configured with Segment Routing, when the peer interface flaps continuously, the memory leak might be observed which might lead to the process rpd crash.
PR Number	Synopsis	Category: Chassis mgmt for all QFX systems - chassis MIB, alarms, CLI
1584902	The the QFX5000 and QFX10000 lines of switches might hang for some time after reboot Product-Group=junosvae	On the QFX5000 and QFX10000 lines of switches, during reboot in certain instances the device might get into a state where the Junos virtual machine hangs until the NMI is triggered and reboots fully. The system recovers after approximately 30 minutes.
PR Number	Synopsis	Category: QFX platform fabric mgmt, PF chip, fabric part of PE chip
1660699	spmb0 Cell drops on sib 'x' pf 'x' errors seen in QFX10008/QFX10016 platforms without generating any alarms Product-Group=junos	On QFX10008/QFX10016 platforms, cell drops alarms are enabled because cell drops are seen without generating alarms causing packet drops/traffic impact.
PR Number	Synopsis	Category: QFX ISSUE PFE related
1576060	On the QFX5100-48T switch, the 10G interface might be auto-negotiated at 1G speed instead of 10G Product-Group=junos	On the QFX5100-48T switch, auto-negotiation might fail to work and the 10G interface might be auto-negotiated at 1G speed instead of 10G. This issue might cause a link down.
PR Number	Synopsis	Category: This would be category for IPSEC functionality on M/MX/T ser
1674585	The 'kmd' process may crash due to SA re-negotiation failure during IKE phase-1 Product-Group=junos	On platforms running Junos 16.2 onwards releases, if for some reason IKE (Internet Key Exchange) phase-1 SA (Security Association) re-keying fails, 'kmd' process may crash and the IPSec (Internet Protocol Security) tunnels may also get torn down. Most of the time, the reason is that the initiator changes its offerings after the initial successful key exchange.
PR Number	Synopsis	Category: Bug and Review Tracking for Segment routing traffic eng
1657176	SR-TE LSP state might go down due to "Compute Result failure" Product-Group=junos	On all Junos and Junos OS Evolved Platforms, the node index in the link key is short and cannot hold when the node's index is more than 32 bits long. Once this index exceeds its limitation, SR-TE (Segment Routing-Traffic Engineering) LSP might go down due to "Compute Result failure".
PR Number	Synopsis	Category: SSL Proxy functionality on JUNOS
1501624	Memory corruption might happen if SSL proxy is enabled on SRX platforms Product-Group=junos	On all SRX platforms, if Secure Sockets Layer (SSL) proxy is enabled, when the device is running low on memory, there might be invalid free for certificate cache which will result in memory corruption and random cores.
PR Number	Synopsis	Category: Vale fabric related issues.
1615942	90% traffic got dropped when the number of Switch Interface Board (SIB) plane is reduced from 4 to 3 on PTX10008 and PTX10016 Product-Group=junos	On PTX10008 and PTX10016 routers, when the number of Switch Interface Board (SIB) planes is reduced from 4 to 3, traffic might drop by 90%.

Modification History

First publication 2022-08-29