6.2.11 Release Notes#1012
Merged
Merged
Conversation
MichaelBaj
requested changes
May 11, 2026
| ------ | ||
| - **I95-63033 `show lte detail` crash when LTE apn-name is invalid:** Resolved an issue where executing `show lte detail` when an invalid APN name is configured caused a CLI crash due to an unhandled dictionary update error. | ||
| ------ | ||
| - **I95-63042 Nessus CVE false positives resolved:** Resolved multiple false positive CVE findings reported by Nessus scanners. Updated packages to use the correct Oracle Linux 7 versions, eliminating false positives caused by minor version differences between the CentOS 7 base packages and the OL7 vulnerability database. |
Contributor
There was a problem hiding this comment.
This is an internal detail and should be removed from the release notes.
| ------ | ||
| - **I95-63228 Premature route installation complete notification:** In some cases a premature internal notification that the route installation was complete was being transmitted, causing the Graceful Restart process to terminate early. This issue has been resolved. | ||
| ------ | ||
| - **I95-63295 Highway crash with mutex lock errors at multiple sites:** Resolved an issue where a time-intensive operation on a large entry was preventing other threads from accessing data, causing a highway crash due to mutex lock contention. |
Contributor
There was a problem hiding this comment.
I95-63295 Highway crash with mutex lock errors at multiple sites: -> I95-63295 Highway crash due to mutex lock errors
| ------ | ||
| - **I95-64709 Premature route installation complete notification during Graceful Restart:** Resolved a documentation discrepancy and corrected the behavior of the `stale-routes-time` parameter and its relationship to RFC 4724's `Selection_Deferral_Timer`, ensuring proper Graceful Restart route handling. | ||
| ------ | ||
| - **I95-64770 Remove axios NPM from the SSR:** Removed the axios NPM package from the SSR codebase as a precautionary measure following a supply chain compromise affecting certain versions of the library. The SSR was not vulnerable as it used an unaffected version. |
Contributor
There was a problem hiding this comment.
This is for internal tooling only and should be removed from the release notes.
| ------ | ||
| - **I95-64876 Intermittent application issues due to child service:** Resolved an issue that lead to NAT pool exhaustion and intermittent application failures. When domain name–based child services had different routing paths than the parent service, it caused stale sessions on upstream firewalls. | ||
| ------ | ||
| - **I95-64877 Changes to guard against cSRX crash:** Resolved an issue where the IDP attack database was lost on reboot. The database is now stored persistently, and additional safeguards have been added for AV engine health checks, SSL certificate staging retries, and error code accuracy. |
Contributor
There was a problem hiding this comment.
cSRX should be "L7 security stack"
MichaelBaj
approved these changes
May 12, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.