Firmware Update: Synology Disk Station Manager 4.2 build 3251

Synology has released an update for Disk Station Manager version 4.2. Version 4.2 is only suitable for older NAS models ending in 09. Synology DSM is the management software that runs on several of the company’s NAS products. The Disk, Cube and Rack Stations offer more than just extra storage space. For example, backups of all clients on the network can be made and files can be downloaded via http, ftp, bittorrent, usenet and emule, so that, for example, energy-hungry PCs can switch off at night while the download just comes in. In addition, audio and video files can be streamed over the network via the built-in iTunes server, a dynamic website can be hosted using PHP and MySQL and the device can act as a print server. This update should fix several security vulnerabilities.

Version: 4.2-3251

• Upgraded OpenSSL to Version 1.0.1i to fix multiple security issues (CVE-2014-3505, CVE-2014-3506, CVE-2014-3507, CVE-2014-3508, CVE-2014-3509, CVE-2014-3510, CVE -2014-3511, CVE-2014-3512, and CVE-2014-5139).
• Implemented fixes for Kerberos 5 to address multiple security issues that allow remote attackers to cause denial of service (CVE-2012-1013, CVE-2014-4341, CVE-2014-4342, CVE-2014-4344).
• Updated to the last version of PHP 5.3, announced EOL by the official PHP development team, to address multiple security vulnerabilities (CVE-2014-3981, CVE-2014-3515, CVE-2013-6712, CVE-2014-0207, CVE- 2014-0238, CVE-2014-0237, CVE-2014-4049).
• Minor bug fixes.

Version: 4.2-3250

• Upgraded OpenSSL to Version 1.0.1h to fix several security issues (CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, and CVE-2014-3470) .
• Minor bugs fixed.