Under T416444 we have been upgrading our Juniper devices, including core routers, to address some mid-level CVEs.

Unfortunately as part of this process we hit on a bug which can cause rpd to crash on JunOS when the BGP graceful-shutdown feature is used (see T429386). Juniper have informed us this is a known bug which is only fixed in the very latest point release 23.4R2-S8.

The good thing is there is no massive urgency to upgrade to address this issue. It only affects manual operations that we might carry out, and doesn't represent a security or operational risk otherwise (i.e. without one of us issuing the graceful-shutdown command).

The bad thing is we use that command when draining traffic on routers to upgrade them, and Juniper advise it is present in all previous JunOS verions (though we've only hit it on 23.4R2-S7).

Creating this task to track:

• The remaining upgrades already planned, which we will now skip to 23.4R2-S8
• The core routers we've already done and put on 23.4R2-S7, which we now need to revisit.