Alert Type

PSN - Product Support Notification
Low/NotificationSoftware Release Notification
Low/NotificationSoftware Release Notification

Product Affected

ACX PTX and QFX running Junos Evoled Software

Alert Description


Junos Software Service Release version 20.4R3-S5-EVO is now available for download from the Junos software download site

Download Junos Software Service Release:

  1. Go to Junos Platforms - Download Software page
  2. Input your product in the "Find a Product" search box
  3. From the Type/OS drop-down menu, select Junos SR
  4. From the Version drop-down menu, select your version
  5. Click the Software tab
  6. Select the Install Package as need and follow the prompts

Solution

Junos Software service Release version 20.4R3-S5-EVO is now available.

20.4R3-S5-EVO - List of Fixed issues

PR NumberSynopsisCategory: Bi Directional Forwarding Detection (BFD)
1675921Micro BFD session state in RE remain UP even peer side session is down.
Product-Group=evo		Any platforms with Micro BFD configured on member links of the LAG/ae interface, BFD Session state in RE remains as UP always even though PEER device has ceased.
PR NumberSynopsisCategory: Express BT PFE L3 Features
1651473The BFD session might flap in some scaled system with churn
Product-Group=evo		On all Junos and Junos Evolved AFT (Advanced Forwarding Toolkit) platforms, this is infrastructure enhancement which was done to avoid BFD session flapping during the system churn. Without this infra enhancement, BFD session flap would happen in some scaled system with churn.
PR NumberSynopsisCategory: Class of Service
1604943IEEE 802.1 rewrite rule might not work on MPC10 linecard
Product-Group=evo		On MX platforms with MPC10/MPC11 linecard, if Class-of-Service (CoS) ieee-802.1 rewrite rule is applied on Aggregated Ethernet (AE) interface with vlan-ccc encapsulation, the rewrite rule might not work as expected due to this issue.
PR NumberSynopsisCategory: Distributor related issues
1658426Routes in RIB and FIB table may go out of sync on all Junos Evolved platforms and causes a traffic impact
Product-Group=evo		On all Junos evolved platforms, routes in RIB (Routing Information Base) and FIB (Forwarding Information Base) are not in sync when it is running over long period of the time (200+ days) with a constant route churn. It causes a traffic impact due to stale entries.
PR NumberSynopsisCategory: Zookeeper related issues
1678880RE reboot, rpd crash, etc. can be seen if the volume of zookeeper logs is high on Junos Evolved platforms
Product-Group=evo		Undesirable and impactful behavior such as kernel crash, RE (Routing-Engine) reboot, rpd crash, etc. can be seen if the volume of recorded zookeeper logs is high in the /run/zookeeper/conf/default/version-2 directory.
PR NumberSynopsisCategory: AAA, auditd issues
1622936Idle/inactive netconf user sessions not terminated as per the config set under class
Product-Group=evo		Session idle time was not supported for netconf session in EVO, as part of the current PR extending this feature support. This might result in dangling sessions.
PR NumberSynopsisCategory: mgd, ddl, odl infra issues
1621892Junos OS Evolved: The ssh CLI command always runs as root which can lead to privilege escalation (CVE-2022-22239)
Product-Group=evo		An Execution with Unnecessary Privileges vulnerability in Junos Management Daemon (mgd) of Juniper Networks Junos OS Evolved allows a locally authenticated attacker with low privileges to escalate their privileges on the device and potentially remote systems. Please refer to https://kb.juniper.net/JSA69895 [juniper.net] for more information.
PR NumberSynopsisCategory: Multiprotocol Label Switching
1655031The rpd core is seen due to ted-export and ted database out of sync
Product-Group=evo		On all Junos and Junos OS Evolved platforms, rpd core is hit when the events for deleting prefixes, sids, links and nodes come in out of order which occasionally leads to ted-export and ted database out of sync.
1672804The rpd crash might be observed with Container LSPs
Product-Group=evo		On all Junos/EVO platforms, the rpd process might get crash if the Container LSP (Label Switch Path) is associated with an external-controller.
1673348CPU utilization of rpd process may reach 100% while reporting LSP states to pccd if the IS-IS update churn is high
Product-Group=evo		On all Junos and Junos Evolved platforms where PCEP (Path Computation Element Protocol) is provisioned, after IS-IS (Intermediate System-Intermediate System) PDU (Protocol Data Unit) flooding, rpd (routing protocol daemon) re-computes LSPs (Label Switched Path) and sends those to the pccd (path computation client daemon) which in turn reports those to PCE (Path Computation Element) for processing. If the update churn is high, this may cause the rpd to reach or get stuck at 100% CPU utilization.
PR NumberSynopsisCategory: OSPF routing protocol
1645221Junos OS and Junos OS Evolved: RPD crash upon receipt of specific OSPFv3 LSAs (CVE-2022-22230)
Product-Group=evo		An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause DoS (Denial of Service). Please refer to https://kb.juniper.net/JSA69884 [juniper.net] for more information.
PR NumberSynopsisCategory: Path computation client daemon
1675816In a rare case, 'pccd' will crash when the PCEP connection is down
Product-Group=evo		On all Junos and Junos Evolved platforms, on the intermediate device when connection towards Path Computation Element (PCE) is down, Path Computation Element Protocol (PCEP) session will be down resulting in pccd crash. Routing protocols are not impacted but pccd crashes.
PR NumberSynopsisCategory: RPD Interfaces related issues
1659102The rpd memory leak might be seen while processing vlan-ccc configuration
Product-Group=evo		On all Junos and Junos Evolved platforms, when deleting/adding the whole interface unit of family vlan-ccc, the rpd will observe a memory leak.
PR NumberSynopsisCategory: KRT Queue issues within RPD
1623170BGP Flowspec might not show counters
Product-Group=evo		On all Junos and Junos Evolved platforms, when installing an IPv6 firewall filter using BGP flowspec, matching traffic counters may show "0" values.
PR NumberSynopsisCategory: Issue related to mcnh routing infrastructure within RPD
1663568The forwarding plane is not updated properly in scaled MVPN scenario after receiving PIM leave messages
Product-Group=evo		On all Junos and Junos Evolved platforms, when IFLs from non-default routing instances are being added with the OIF scaling of more than 2000 there will be a spillover of IFLNHs into different next hops due to this the outgoing interfaces (OIFs) will not be deleted from multicast next-hop.
PR NumberSynopsisCategory: RPD Next-hop issues including indirect, CNH, and MCNH
1659255The multipath route might be missing when multipath is configured
Product-Group=evo		On all Junos and Evolved platforms, when multipath is configured multipath computation is missed for the routes resulting in missing multipath routes.
PR NumberSynopsisCategory: PTX10K RE EVO Issues
1677295Unexpected storage media comsumption caused by system application log
Product-Group=evo		When the system disk usage reaches certain level, the auto log clean up process within the system will remove some application logs as an automated clean up procedure. However, some application logs require a specific way to be removed and the existing clean up procedure might leave those application log grows unbounded.
PR NumberSynopsisCategory: ZT/YTpfe bridging, learning, stp, oam, irb software
1548263Traffic flood might be observed in EVPN instance due to misprogrammed MAC address in the PFE
Product-Group=evo		On MX platforms with MPC10E and MPC11E line cards, if any EVPN (Ethernet virtual private network) is configured, traffic flood towards all CE (Customer edge) devices might be observed due to a misprogrammed MAC address in PFE (Packet forwarding engine).
PR NumberSynopsisCategory: UI Infrastructure - mgd, DAX API, DDL/ODL
1637552During the ephemeral configuration database changes, "mgd" core files might be generated
Product-Group=evo		On all Junos platforms, "mgd" core files might be generated when the ephemeral configuration database changes.
PR NumberSynopsisCategory: Virtual Private Networks - rpd
1661542Traffic drop may be seen when Inter-AS option-B label spoofing is configured along with vrf-table-label
Product-Group=evo		On all Junos and Junos OS Evolved platforms, when the router is configured as both Autonomous System Border Router and Provider Edge (ASBR and PE), and virtual-router/mpls-forwarding as "forwarding-context" is in use along with "vrf-tabel-label" for the Local Layer 3 Virtual Private Network - Virtual Routing and Forwarding (L3VPN VRF) traffic drop may be seen.
PR NumberSynopsisCategory: Express ZX PFE L3 Features
1643187Traffic Loss might be observed when 'deactivate/activate' the firewall filter
Product-Group=evo		On Junos Evolved PTX platforms, with scaled prefix-list match conditions of IPv4 and IPv6, when 'deactivate/activate' the firewall filter might result in traffic loss.
 
 

20.4R3-S5-EVO - List of Known issues

PR NumberSynopsisCategory: EVO platform software
1597999PTX10001-36MR: Inconsistency in the platform name used in multiple places, version, snmp mibs, etc
Product-Group=evo		"show snmp mib walk sysDescr" will show ptx10001-36mr.
PR NumberSynopsisCategory: Border Gateway Protocol
1675893The process rpd (route process daemon) crashes with BGP VPN (Border gateway protocol - Virtual Private Network) config, while ebgp (external bgp) routes exported into ibgp (internal bgp) core with vrf (virtual route forward) configured
Product-Group=evo		On all Junos devices, rpd crashes with BGP VPN configured with vrf-label and exporting eBGP routes to iBGP.
PR NumberSynopsisCategory: PFE L2 forwarding features on BT based platforms
1666921MVRP enabled trunk ports might go into blocked/designated state on the PTX EVO platforms
Product-Group=evo		On the PTX EVO platforms, MVRP enabled trunk ports with xSTP configured might go into blocked/designated state if the peer connects to the interface has no VLANs configured in its trunk port.
PR NumberSynopsisCategory: Express BT PFE L3 Features
1671065Fragment frames errors will be seen on the 400G interface
Product-Group=evo		On the PTX10003 platform, fragment frames error will be seen on the 400G optics interface when the optics cable interoperates with third-party equipment. Due to this, some packets would be lost.
PR NumberSynopsisCategory: QFX Control Plane VXLAN
1650202ARP/NS response to anycast IRB might fail due to missing mac-ip entry
Product-Group=evo		On all Junos and EVO platforms, IRB (Integrated routing and bridging) static entry might be missing in the mac-ip-table for mac move allowed for local static IRB entry.

Modification History

First publication 2022-11-10