Firmware Update: Synology Disk Station Manager 4.2 build 3247

Synology has released an update for Disk Station Manager version 4.2. Version 4.2 is only suitable for the NAS models ending in 09. Synology DSM is the management software that runs on several of the company’s NAS products. The Disk, Cube and Rack Stations offer more than just extra storage space. For example, backups of all clients on the network can be made and files can be downloaded via http, ftp, bittorrent, usenet and emule, so that, for example, energy-hungry PCs can switch off at night while the download just comes in. In addition, audio and video files can be streamed over the network via the built-in iTunes server, a dynamic website can be hosted using PHP and MySQL and the device can act as a print server. This update should include some security vulnerabilities.

Change Log

• Fixed a security issue related to OpenSSL (CVE-2013-4353).
• Fixed security issues by upgrading PHP to version 5.3.28 (CVE-2013-4073, CVE-2013-6420).
• Fixed a security issue to prevent malicious attacks via NTP service (CVE-2013-5211).
• Fixed a security issue of Windows File Services (SMB) to prevent unauthorized access. (CVE-2013-4408, CVE-2012-6150)
• Fixed an issue where CalDAV clients cannot receive data from CalDAV server.
• Fixed an issue where data might not be correctly written to a degraded RAID 5 volume.