Firmware update: QNAP TS-xx0/xx2/xx9 4.1.3 build 0217

QNAP has released version 4.1.3 of the firmware included on various models of its NAS devices. In version 4.1.3, among other things, the option to install NAS via an HDMI connection has been added and the firmware can better handle external hard drives with an NTFS or HFS+ format. Furthermore, the necessary problems have of course also been solved. The complete changelog can be found below.

Enhancement

• Added support for NAS installation over HDMI.
• Enhanced NTFS and HFS+ external drive compatibility.

Bug Fixes

• Fixed the “Potential Remote-code Execution Flaw in GNU C Library (glibc)” (CVE-2015-0235) issue for the TS-x31, TS-x31+,TS-x39, TS-x59, TS-x51, and TS- x53 series.
• Fixed the Network Time Protocol Daemon vulnerability that could lead to unauthorized execution of arbitrary codes by remote users with admin privileges or triggering unintended changes on the system. (CVE-2014-9295, CVE-2014-9296)
• Fixed the ProFTPD vulnerability which could lead to unauthorized file ownership modification, directory operations, symlink creation and file timestamp modification and denial of services. (CVE-2012-6095, CVE-2011-1137, CVE-2010-4652, CVE-2010-4221, CVE-2010-3867)
• The system fails to synchronize the time on the QTS desktop and system time after the Turbo NAS is idle for over 20 minutes
• When both the “Enable Advanced Folder Permissions” and “Enable Windows ACL support” options are checked, shared folders will become inaccessible using Samba.
• The TS-870 fails to mount volumes after upgrading to firmware version 4.1.2 20150126.
• System migration fails during a firmware update.
• The system is unable to upload documents with an Arabic name using File Station or via Samba.
• The system fails to stop the file uploading process when the storage quota is exceeded.
• USB devices can still be browsed and accessed after they are encrypted.
• The system fails to display subfolders (under shared folders) if accessed through a shared link.
• Shared folders cannot be browsed via AFP.
• Shared folders on the NAS (a domain member) cannot be accessed.
• The system fails to enforce read-only permissions on the @Recycle folder.
• Microsoft ODX fails after updating the firmware to 4.1.1 and later versions.
• The system fails to restore a LUN if the LUN list is empty.
• After a LUN backup job is deleted, the [Action] button becomes disabled.
• The system fails to back up large LUNs.
• Cloning VM images from the host to an iSCSI disk (using Block-based LUN, Thin Provisioning datastore) will cause the Turbo NAS to reboot.
• HD Station crashes after changing the external disk label.
• Severe latency when playing MP4 files using the DLNA player.