Alert Type

SRN - Software Release Notification
Low/NotificationSoftware Release Notification
Low/NotificationSoftware Release Notification

Product Affected

ACX EX MX NFX PTX QFX

Alert Description

Junos Software Service Release version 24.4R1-S3 is now available for download from the Junos software download site

Download Junos Software Service Release:

  1. Go to Junos Platforms - Download Software page
  2. Input your product in the "Find a Product" search box
  3. From the Type/OS drop-down menu, select Junos SR
  4. From the Version drop-down menu, select your version
  5. Click the Software tab
  6. Select the Install Package as need and follow the prompts

NOTE: Starting on August 30th, 2024, we include PR's severity with each entry. See KB86335 [juniper.net] for the definition of PR's Severity

 

Junos Selective Update (JSU) feasible

Not applicable

Call to Action

Please review

Note: The SRX, vSRX, and JDM platforms are not included in this 24.4R1-S3 Service Release

Solution

Junos Software service Release version 24.4R1-S3 is now available.

24.4R1-S3 - List of Fixed issues 

PR NumberSynopsisCategory: SRX4700 datapath related issue
1849108
Major		It is not recommended to restart chassisd using CLI command "restart chassis-control" in MNHA setup
Product-Group=junos
Severity=Major		It is not recommended to restart chassisd using CLI command "restart chassis-control" in MNHA (Multinode High Availability) setup. It will cause unexpected behaviors.
PR NumberSynopsisCategory: SRX1600 MACsec
1863576
Minor		Packet drops can occur when packets are received with a size equal to the default MRU
Product-Group=junos
Severity=Minor		On SRX1600, SRX2300 and SRX4300 platforms, when packets are received with a size matching the default MRU (Maximum Receive Unit) value of 1522 bytes, packets are dropped, leading to an impact on traffic.
PR NumberSynopsisCategory: the replication daemon (repd) for Shared Memory-base
1870183
Major		RPD might crash when upgrading using no-validate.
Product-Group=junos
Severity=Major		RPD might crash when upgrading without using no-validate. Use no-validate to avoid the crash.
PR NumberSynopsisCategory: Device Configuration Daemon
1848768
Major		MTU configuration is not applied from the configuration group after commit and "warning" is seen
Product-Group=junos
Severity=Major		When configuring MTU on interfaces through a configuration-group and commit the changes, those are not saved on the configuration file.
PR NumberSynopsisCategory: AAA, auditd issues
1862203
Minor		Radius authentication is failing when Challenge Token is entered
Product-Group=junos
Severity=Minor		On all Junos and Evo platforms, the Radius Multi-Factor Authentication (MFA) failing for user login if the password and token were provided in two separate steps.
PR NumberSynopsisCategory: Configd, ffp issues
1877439
Minor		Traffic drop occurs on Junos Evolved platforms when prefix is moved between dynamic prefix-lists used in firewall filter
Product-Group=junos
Severity=Minor		On all Junos Evolved platforms, when a firewall filter is configured with a dynamic prefix-list that is referenced using an apply-path statement, moving a prefix from one such prefix-list to another where both prefix-lists match the apply-path pattern results in the prefix not being programmed in the PFE. This causes traffic loss for that prefix. The issue is triggered when the configuration includes apply-path pointing to both the source and destination prefix-lists, and a prefix is deleted from one and added to the other through a commit operation.
PR NumberSynopsisCategory: mgd, ddl, odl infra issues
PR NumberSynopsisCategory: EVPN control plane issues
1851659
Minor		Few seconds traffic loss during previous DF coming back with EVPN-VPWS non-revertive DF preference feature enabled
Product-Group=junos
Severity=Minor		With DF(designated forwarder) preference in non-revertive mode, we see previous DF which comes after failure, becomes primary for few seconds and we see few seconds traffic loss due to this.
PR NumberSynopsisCategory: EX4400 platform
1845365
Major		PEM mismatch alarms vanished after performing system reboot on member
Product-Group=junos
Severity=Major		PEM mismatch alarms are cleared from the master after rebooting a Virtual Chassis member containing an unsupported mixed AC/DC PSU combination.
PR NumberSynopsisCategory: SRX1500 platform software
1831955
Major		The SRX1500 drops the packet if MTU matches the MRU of the receiving device
Product-Group=junosvae
Severity=Major		On SRX1500 platforms, if the Maximum Transmission Unit (MTU) is configured to match the Maximum Receive Unit (MRU) of the receiving device, packet drops occur. This occurs because additional processing overhead increases the packet size beyond the MRU limit, causing the receiving device to drop the packets.
PR NumberSynopsisCategory: Libjtask for RPD tasks, scheduler, timers, memory, and slip
1843627
Critical		Memory leak when deactivating/reactivating routing instances with vrf-table-label
Product-Group=junos
Severity=Critical		On all Junos Evolved platforms, a memory leak occurs when a routing instance configured with "vrf-table-label" is deactivated and then reactivated, followed by a Routing Engine (RE) switchover on dual RE systems. This issue causes a slow memory leak in the system.
PR NumberSynopsisCategory: JFlow bug tracker for SRX platforms
1843679
Minor		Application crash is observed due to insufficient memory when a large number of JFlow entries are created
Product-Group=junos
Severity=Minor		On Junos OS SRX platforms with JFlow configured with sampling interval set to 1, traffic impact is observed due to insufficient memory for the Layer 7 applications leading to application failure. The issue happens when a large number of JFlow entries are created exhausting memory potentially leading to crash.
PR NumberSynopsisCategory: Flow Module
1865294
Major		SRX4700 custom application session inactive timeout is half of the configured value
Product-Group=junos
Severity=Major		When customer config custom application inactive timeout value to control session timeout value, the actual session timeout value is half of the configured value
PR NumberSynopsisCategory: all logging related bugs on srx platforms
1860597
Major		Security log report messages w.r.t logical system is not generated
Product-Group=junos
Severity=Major		show security log report cli command for logical systems is not working for 24.2R2, 24.4R1-S2, if log report is disabled under root system. Work around is available for this issue.
PR NumberSynopsisCategory: IPSEC/IKE VPN
1864758
Major		Post reboot , IPSec VPN is not coming up over MNHA active/active deployment
Product-Group=junos
Severity=Major		On all SRX platforms with the new IKE daemon (iked) enabled in an MNHA (Multinode High Availability) active active setup, with the IKE gateway is configured to use the loopback (lo0) interface with the node-local knob enabled, Internet Protocol Security (IPsec) VPN will not come up after a reboot.
1866890
Major		Tunnel sync failure on backup node post 'restart chassis-control' in MNHA Active-Active mode
Product-Group=junos
Severity=Major		On SRX platforms configured in Active-Active MNHA (Multi Note High Availability) mode, after executing restart chassis-control, SRG2 (Service Redundancy Group) came up in the 'Backup' state when the PFE (Packet Forwarding Engine) re-registered with iked. Due to a logic error, iked incorrectly identified SRG2 as 'Active' and proceeded to clear its IPsec tunnels. Since SRG2 was actually in 'Backup', it could not renegotiate the tunnels, resulting in tunnel loss and failure to re-establish the tunnels.
PR NumberSynopsisCategory: Security platform jweb support
1805828
Major		Created address-sets in global address book is not visible in J-Web
Product-Group=junos
Severity=Major		On SRX platform, created address-sets in global address book may not be visible in J-Web
1858466
Major		VPN failures on SRX due to file descriptor issue
Product-Group=junos
Severity=Major		On all SRX platforms, Juniper Secure Connect (JSC) clients may fail to establish a VPN session after successful authentication if more than 20 concurrent connections per client IP are active. In a NATTed environment, the 21st connection will fail, and the customer must retry.
1876075
Minor		Upgrade and Downgrade will fail from J-Web in SRX4600
Product-Group=junos
Severity=Minor		On SRX4600, upgrades and downgrades will fail from J-Web with the error message: "Installation Progress failed at Receive Package File" from release 23.4 and above.
PR NumberSynopsisCategory: Software Junos/JunosEvolved lab product
1880554
Major		Configuring sflow brings the FPC down
Product-Group=junos
Severity=Major		The sflow feature when enabled on vJunos-switch or vJunos-router can bring the FPC down (to OFFLINE) due to a crash in the vmxt process i.e. the PFE micro-kernel. The work around is to unconfigure SFLOW. The issue is fixed in multiple releases as noted in the PR.
PR NumberSynopsisCategory: Layer2 forwarding on EX/NTF/PTX/QFX
1864295
Major		L2ald process crash is observed upon executing hidden command "show ethernet-switching debug-statistics fast-mac-update" in case the command doesn't have any output
Product-Group=junos
Severity=Major		On all Junos and Junos OS Evolved platforms, the l2ald process crash is observed upon executing the hidden command "show ethernet-switching debug-statistics fast-mac-update" in case the command doesn't have any output.
PR NumberSynopsisCategory: SW PRs for MPC10E Interfaces
1727066
Major		Extremely fast interface flaps in MPC10E line-card causes cpu to hog which leads to fpc reboot.
Product-Group=junos
Severity=Major		Extremely fast interface flaps in MPC10E line-card causes cpu to hog which leads to fpc reboot.
PR NumberSynopsisCategory: build tools
1874525
Major		FTP default mode changed from active to passive on 24.2R2
Product-Group=junos
Severity=Major		An upgrade to libfetch caused the default FTP mode to move from active to passive. This PR corrects this as customers more than likely expect the previous active FTP functionality on their networks.
PR NumberSynopsisCategory: Phone-Home-Client Infrastructure
1871802
Critical		High memory and CPU usage due to unintended phone-home client activation
Product-Group=junos
Severity=Critical		On Junos OS Evolved platforms, high memory and CPU usage may occur if the phone-home client (PHC) is unintentionally triggered, such as when the device boots with factory default settings or when phone-home is manually configured. This can lead to system slowness, crashes, and eventual device reboots.
PR NumberSynopsisCategory: PTX10K Routing Engine
1870082
Critical		Image validation fails during the Junos VM validation
Product-Group=junos
Severity=Critical		On all Junos platforms that use pkgs/junos-vmguest/mtx/vmhost-pkg-support when loading image to 25.3+, image validation fails.
PR NumberSynopsisCategory: QFX EVPN / VxLAN
1866130
Minor		Command "show pfe vxlan" is not supported on QFX5200 devices
Product-Group=junosvae
Severity=Minor		Support added for "show pfe vxlan" CLI command on QFX 5200 devices
PR NumberSynopsisCategory: RPD Next-hop issues including indirect, CNH, and MCNH
1851629
Minor		Next-hop APIs to support LDP stitching cases over BGP routes pointing to list of indirects
Product-Group=junos
Severity=Minor		On all Junos and Junos Evolved platforms this is an enhancement for Nexthop APIs to support LDP stitching cases over BGP routes pointing to list of indirects next-hops.
PR NumberSynopsisCategory: RPD route tables, resolver, routing instances, static routes
1832162
Major		rt_instance memory leak on bulk configuration changes
Product-Group=junos
Severity=Major		A memory leak of approximately 17MB to 38MB in the rt_instance memory block occurs when all three components routing instances, interfaces, and protocols are deactivated and immediately activated or rolled back without a delay. This is seen in large-scale environments (e.g., 4k routing instances) with sharding and NSR enabled. A 4-minute delay between deactivation and activation or rollback prevents the issue. This is a memory leak only, with no direct service or traffic impact.
1847811
Minor		The rpd crash on commit when configuring router-advertisement with DNS search label under 3 characters
Product-Group=junos
Severity=Minor		On all Junos and Junos OS Evolved platforms, committing a configuration under protocols router-advertisement with a dns-search-list containing a domain label shorter than 3 characters causes the rpd (Routing Protocol Daemon) process crashes and restart. This results in configuration commit failure and temporary disruption to routing protocols.
PR NumberSynopsisCategory: SRX branch platforms
1853238
Minor		Flexible-vlan-tagging option is missing under interface hierarchy on SRX3xx series
Product-Group=junos
Severity=Minor		On SRX3xx series configured with flexible-vlan-tagging, after upgrading the device to Junos version 23.4R2 or higher the flexible-vlan-tagging option is missing under the interface hierarchy. This leads to a syntax error, stopping users from setting the flexible-vlan-tagging.
PR NumberSynopsisCategory: SRX-1RU platfom datapath SW defects
1842873
Minor		Load balance hash-key forwarding persists when switching to Layer 3-only
Product-Group=junos
Severity=Minor		On Junos SRX4600, SRX1600, SRX2300 and SRX4300 platforms, when switching load balance from L3+L4 to L3, hash-key forwarding fails; the device retains L3+L4.
PR NumberSynopsisCategory: SRX-1RU platfom related protocol, QoS, filtering features et
1823577
Major		On SRX4600 platforms with heavy traffic, the FPGA drops packets
Product-Group=junosvae
Severity=Major		On SRX4600 platforms, if a few high-priority queues handle excessive traffic, those queues can become stuck, leading to packet drops.
PR NumberSynopsisCategory: MX10003/MX204 Timing/Sync-E issues tracking
1863091
Major		FPC will crash in MX10003 during the Master switchover to RE1 or Master set to RE1
Product-Group=junos
Severity=Major		MX10003 FPC (Flexible PIC Concentrators) will crash if Primary RE (Routing Engine) switchover to RE1 (Routing Engine 1) or RE1 is set to Master from release 21.2 and above.
PR NumberSynopsisCategory: ZT/YT pfe l3 forwarding issues
1858076
Major		The aftd process crash is seen on Junos OS platforms running MPC10, MPC11, LC4800, LC9600 line cards and in Junos OS platforms MX304, EX9200-15C
Product-Group=junos
Severity=Major		On Junos OS platforms running MPC10, MPC11, LC4800, LC9600 line cards and in Junos OS platforms MX304, EX9200-15C, aftd process crash is seen resulting in crash of FPC (Flexible PIC Concentrator) line card while the route module of PFE (Packet Forwarding Engine) processing route churns as simultaneous actions (add/delete/read) by multiple threads on the process.
PR NumberSynopsisCategory: Trio pfe stateless firewall software
1837840
Major		Incorrect color-aware srTCM marking with yellow packet loss priority
Product-Group=junos
Severity=Major		There was a software side limitation on the highest CBS that can be configured for MPCs that have LU type lookup chips due to a hardware PR. The Hardware PR was resolved in MX240/ MX480/ MX960/ MX2008/ MX2010/ MX2020/ MX10003/ MX10008/MX10016/EX9200/EX9204/EX9208/EX9214/EX9251/EX9253/SRX5400/SRX5600/SRX5800 platforms, but the software-side limitation was not removed for the same. Due to this limitation, whenever the CBS was configured above its limit (earlier 33m), the low-level parameters used to get configured such that the packets would not have any credits available, resulting in them getting marked as RED.
PR NumberSynopsisCategory: Trio pfe bridging, learning, stp, oam, irb software
1846365
Major		Traffic drops after link flap on active-active ESI setup with MAC pinning enabled
Product-Group=junos
Severity=Major		On MX platforms with ukern (legacy) FPC (Flexible PIC Concentrator) based in trio chipset and configured in an active-active ESI (Ethernet Segment Identifier) setup, traffic will be dropped after a flap of the DF (Designated Forwarder) or BDF (Backup Designated Forwarder) LAG (Link Aggregation Group) interface member.
PR NumberSynopsisCategory: UI Infrastructure - mgd, DAX API, DDL/ODL
1854070
Minor		cli coredump genarated when the size of buffer area (user input) increased to 1GB
Product-Group=junos
Severity=Minor		Cli coredump genarated when the size of buffer area (user input) increased to 1GB.
1861063
Critical		Unexpected issues such as login failures or disabled interfaces observed following abrupt reboot during commit operation
Product-Group=junos
Severity=Critical		On Junos platforms with boot-time optimization enabled, an abrupt reboot during a commit operation can cause configuration file corruption, potentially leading to issues like login failures or disabled interfaces.
PR NumberSynopsisCategory: Issues related to NETCONF
1816904
Major		Native junos modules in hello-message and yang modules in /var/run/db/yangs are not same
Product-Group=junos
Severity=Major		Native junos modules in hello-message and yang modules in /var/run/db/yangs are not same. The build failure is due to a mismatch between the native Junos modules in the hello message and YANG modules in /var/run/db/yangs, causing the test to fail with a difference in lengths: 229 != 230.
PR NumberSynopsisCategory: web filterig issues
1854519
Major		FPC crashing when web filtering type set to "juniper-enhanced" or "NG-juniper"
Product-Group=junos
Severity=Major		On all SRX platforms, when the web-filtering type set to "juniper-enhanced" or "NG-juniper" (NextGen-juniper), it might cause FPC (Flexible Port Concentrator) card crash and with "srxpfe" or "lcore" crash files generated.

 

 

24.4R1-S3 - List of Known issues 

PR NumberSynopsisCategory: SRX4700 interface and optics related issues
1834834
Major		SRX4700: Casino Royale: SnP:Error message observed on IPSEC config load "[Error] NH : Nexthop Entry not found for (nexthop-id:43134) , error: No such file or directory"
Product-Group=junos		Error "Nexthop Entry not found for (nexthop-id:43134) " seen on SRX4700 during bootup, This has no functional impact.

Resolved In: evo:24.4R2-EVO evo:25.2R1-EVO evo:25.2R2-EVO evo:25.3R1-EVO junos:25.2R1 junos:25.2R2 junos:25.3R1
PR NumberSynopsisCategory: Covers Application classification workflows apart from custo
1833667
Major		Custom application detection fails for L4 traffic after upgrade due to uncompiled signatures
Product-Group=junos		On SRX branch series devices configured with custom applications and a signature package (sigpack) already installed, installing a new sigpack may result in the failure to recompile the custom applications, causing detection failures. During Layer 4-7 traffic processing, custom applications may be incorrectly marked as "INCONCLUSIVE," impacting application detection.

Resolved In: junos:24.4R2 junos:25.2R1 junos:25.3R1
PR NumberSynopsisCategory: EX4100 RE, Platform Infra, Drivers
1833447
Major		"tcp_timer_keep" messages are observed in the logs during reboot trigger while PoE tests are running
Product-Group=junos		During a reboot or a shutdown operation, these messages are expected due to the fact that the applications that are running in the master RE and backup RE are stopped. This indicates that the peer process (in backup RE typically) is not sending/receiving the keepalive messages. The peer process in the backup RE maybe terminated or getting spawned due to the shutdown or a boot-up activity. kernel: tcp_timer_keep: Dropping socket connection due to keepalive timer expiration, idle/intvl/cnt: 300/300/5 kernel: tcp_timer_keep:Local(0x80000001:6987) Foreign(0x80000010:56833) kernel: tcp_timer_keep: Dropping socket connection due to keepalive timer expiration, idle/intvl/cnt: 300/300/5 kernel: tcp_timer_keep:Local(0x80000001:6987) Foreign(0x80000010:55261)

Resolved In:
PR NumberSynopsisCategory: EX interfaces issues
1580560
Major		On EX2300, EX3400,:EX4300-48MP and EX4300 , Pause frames counters does not get incremented when pause frames are sent.
Product-Group=junos		On EX2300, EX3400,:EX4300-48MP and EX4300 , Pause frames counters does not get incremented when pause frames are sent.

Resolved In:
1823688
Major		Interface goes down after a dc-pfe (Data Centre Packet Forwarding Engine) process restart in a Virtual Chassis environment on EX4400 platform
Product-Group=junos		On a EX4400 virtual chassis environment, if the dc-pfe process restart for any reasons or restarted manually, then there is a possibility of some interfaces going down.

Resolved In: junos:24.2R2-S1 junos:24.4R2 junos:25.2R1 junos:25.3R1
PR NumberSynopsisCategory: EX POE
1845161
Major		In EX4400 based POE platforms the logs related to a poe bounce event may not be seen in /var/log/messages
Product-Group=junos		When a poe bounce command is issued in quick succession for multiple ports, the 'poe enabled' logs may not be printed for some of the poe ports. This is a cosmetic issue and functionality works as expected.

Resolved In:
PR NumberSynopsisCategory: Kernel software for AE/AS/Container
1762490
Minor		JDI-RCT-MPC10E: Ksyncd crash on backup RE after fpc reboot
Product-Group=junos		On MX series, when PS over RLT is configured where all member LTs are hosted on the same FPC and user restarts this FPC then on rare occasion, ksyncd crash can occur on backup RE. However, there is no impact on the master and only backup RE is affected. This issue is not consistent and seen only once out of ~10 or 15 fpc restart operations.

Resolved In: evo:24.4R2-EVO evo:25.2R1-EVO junos:24.4R2 junos:25.1R1 junos:25.2R1
PR NumberSynopsisCategory: Adresses ALG issues found in JSF
1852968
Major		The SRX platform may experience a flowd process crash and generate core dump files when the ALG feature is enabled
Product-Group=junos		On SRX platforms running the Junos Operating System (OS) with Application Layer Gateway (ALG) enabled, in rare scenarios, flowd process can crash and crash files are generated. While the platform eventually recovers, traffic loss will occur during this process.

Resolved In: junos:23.2R2-S4 junos:23.4R2-S5 junos:24.2R2-S1 junos:24.4R1-S2 junos:24.4R2 junos:25.1R1 junos:25.2R1
PR NumberSynopsisCategory: Flow Module
1847419
Minor		Type 5 VXLAN traffic drops are observed when SRX run as L3-VNI gateway and the ingress and egress traffic goes to the same Type-5 VXLAN peer
Product-Group=junos		On Junos OS SRX platforms running as L3-VNI (Layer 3 - Virtual Network Identifier) gateway in EVPN-VxLAN (Ethernet Virtual Private Network - Virtual Extensible LAN) scenario, traffic drops will be observed if traffic passes through two VxLAN tunnels and traffic fails to cross the two VxLAN tunnels when the PFE (Packet Forwarding Engine) is processing the packet having same remote IPs for two VXLAN tunnels.

Resolved In: junos:23.2R2-S2-J8 junos:23.2R2-S4 junos:24.4R2 junos:24.4R2-S1 junos:25.1R1 junos:25.2R1 junos:25.3R1
PR NumberSynopsisCategory: IPSEC/IKE VPN
1861056
Critical		Recommended command to failover from Primary to Backup node
Product-Group=junos		On SRX4700 and SRX5K platform, in MNHA with SRG1 active on node0 and SRG2 active on node1, "restart chassis-control" in node0, after while, followed by "restart chassis-control on node1", both the SRGs became active on node0. However the forwarding table ARI-TS route become dead, therefore traffic to the tunnel is dropped

Resolved In: junos:24.4R2 junos:25.2R1 junos:25.2R2 junos:25.3R1
PR NumberSynopsisCategory: SW PRs for MPC10E PMB
1731258
Major		MPC10 and MPC11 line cards experiencing unexpected reboots
Product-Group=junos		Line cards such as MPC10 and MPC11 experience unexpected reboots because of CPU C-states which are enabled by default thus impacting the customer production traffic.

Resolved In: evo:23.4R2-EVO evo:24.1R1-EVO junos:20.3X75-D441 junos:20.3X75-D46 junos:20.3X75-D52 junos:21.4R3-S7 junos:22.2R3-S4 junos:22.2R3-S5 junos:22.4R3 junos:22.4R3-S1 junos:22.4R3-S2 junos:23.2R2 junos:23.4R2 junos:24.1R1
PR NumberSynopsisCategory: MPC10E timing and synchronization
1767930
Major		MPC10E: Support of G.8275.1 PTP Hybrid mode with speed 400G
Product-Group=junos		MPC10E-400G speed PTP performance is not compliant with class-B for ITU-T-G.8273.2.

Resolved In: evo:24.4R2-EVO evo:25.2R1-EVO evo:25.3R1-EVO junos:23.4R2-S5 junos:24.4R2 junos:25.2R1 junos:25.3R1
PR NumberSynopsisCategory: FreeBSD Kernel Infrastructure
1872010
Major		Junos OS: A local attacker with shell access can execute arbitrary code (CVE-2025-21590)
Product-Group=junos		An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local attacker with high privileges to compromise the integrity of the device. Please refer to https://supportportal.juniper.net/JSA93446 [juniper.net] for more information.

Resolved In: junos:21.2R3-S9 junos:21.4R3-S11 junos:22.2R3-S7 junos:22.4R3-S7 junos:23.2R2-S4 junos:23.4R2-S5 junos:24.2R2-S1 junos:24.4R2 junos:25.3R1
PR NumberSynopsisCategory: QFX5200/5110/5120/5210 Platfom issues
1758400
Major		JUNOS_REG: QFX51200-48YM: Fan status output was not same after/before device vc-switch over.
Product-Group=junos		In a QFX51200-48YM-8C VC setup, after a a mastership switch over fan tray of linecard may not be displayed in show chassis hardware and show chassis environment. There is no functional impact

Resolved In:
PR NumberSynopsisCategory: SSL Proxy functionality on JUNOS
1863878
Major		Mismatch between CLI error message and netconf error message - leads to unclear error message displayed to customers
Product-Group=junos		There is no traffic impact due to this PR. The config commit error message that is displayed when netconf is used is different from the one that we get when CLI commands are used. This is not specific to SSL Proxy and same issue applies to some other config commands as well.

Resolved In:
PR NumberSynopsisCategory: Configuration mgmt, ffp, load-action, commit processing
1751574
Major		Netconf RPC commit fails due to commit warning received for unprotect operation, CLI commit completes with warning
Product-Group=junos		In Netconf private edit configuration session, commit RPC fails when unprotect operation is performed.

Resolved In:
PR NumberSynopsisCategory: UI Infrastructure - mgd, DAX API, DDL/ODL
1593200
Critical		Junos OS: A low privileged user can elevate their privileges to the ones of the highest privileged J-Web user logged in
Product-Group=junos		A Generation of Error Message Containing Sensitive Information vulnerability in the CLI of Juniper Networks Junos OS allows a locally authenticated attacker with low privileges to elevate these to the level of any other user logged in via J-Web at this time, potential leading to a full compromise of the device. Refer to https://kb.juniper.net/JSA11270 [juniper.net] for more information.

Resolved In: evo:21.1R2-S1-EVO evo:21.2R1-S2-EVO evo:21.2R2-EVO evo:21.2R3-EVO evo:21.3R1-EVO evo:21.3R2-EVO evo:21.4R1-EVO junos:15.1R7-S11 junos:18.3R3-S6 junos:18.4R2-S9 junos:18.4R3-S10 junos:19.1R2-S3 junos:19.1R3-S7 junos:19.2R1-S8 junos:19.2R3-S4 junos:19.3R3-S4 junos:19.4R3-S6 junos:20.1R3-S2 junos:20.2R3-S3 junos:20.3R3-S1 junos:20.3X75-D442 junos:20.4R3-S1 junos:21.1R2-S1 junos:21.1R3 junos:21.2R1-S1 junos:21.2R2 junos:21.2R3 junos:21.3R1 junos:21.3R2 junos:21.4R1
1842868
Major		XML namespace string in rpc-reply tag for system-uptime-information was changed to represent the full version name.
Product-Group=junos		XML namespace string in rpc-reply tag for system-uptime-information was changed to represent the full version name.

Resolved In: evo:24.4R2-EVO evo:25.1R1-EVO junos:23.4R2-S4 junos:24.2R2 junos:24.4R2 junos:25.1R1
PR NumberSynopsisCategory: Issues related to YANG Data Models
1781023
Minor		Few yang package are occuring multiple place On Box
Product-Group=junos		Few yang package are occuring multiple place On Box

Resolved In:

 

Modification History

First publication 2025-06-17