SoftHub

Bug Fixes:

- Fixed PPP vulnerabilities (CVE-2015-3310, CVE-2014-3158).
- Fixed OpenSSL vulnerabilities (CVE-2015-4000, CVE-2015-1788, CVE-2015-1789, CVE-2015-1790, CVE-2015-1791, CVE-2015-1793 and CVE-2015-1792).
- Fixed a CGI vulnerability that could lead to unauthorized execution of arbitrary codes by remote users.
- Fixed the Logjam vulnerability (CVE-2015-4000) in Apache, ProFTPD, and OpenVPN.
- Fixed XSS vulnerabilities for the “Edit Account Profile” page, File Station, Syslog Viewer and System Connection Logs.
- Fixed the POODLE vulnerability (CVE-2014-3566) in ProFTPD.
- The system fails to convert between UIDs and GIDs from DCs and AD DCs.
- The system fails to initiate the Smart Fan when HDDs are overheating.
- RAM usage abnormally spikes when domain users log in and log out.
- The system fails to load Pixlr Editor.
- The system fails to fetch the directory ID for folder permissions in File Station.
- The system does not show the correct message after users manually stop LUN snapshot tasks.
- The system fails to sync the recycle bins between the source and destination in a RTRR task.
- The system fails to fetch the entire IP address when users share files in File Station.
- The system fetches an incorrect photo timestamp.
- The system fails to store data in the correct location, causing ram disk full errors when using Twonky Media server.
- The system fails to identify special characters (ex. @#$) in domain group names.
- The system fails to fetch passwords if they contain '<' (ex. H < M38) when creating user accounts using txt import.
- The system fails to identify a local IP, causing file sharing to fail in File Station if users log in from a non-gateway LAN port.
- The system rebuilds shared folders each time the folder property is changed, causing File Station to hang.

Enhancement:

- Support the write cache emulation option in iSCSI to improve performance.

Note:

- We recommend that you upgrade PHP to the latest version by downloading it from the App Center since this version addresses multiple vulnerabilities. To ensure reliability, users should check for compatibility before upgrading.
- We recommend that you upgrade MySQL to the latest version by downloading QMariaDB from the App Center since this version addresses multiple vulnerabilities. To ensure reliability, users should check for compatibility before upgrading.

About Network-Attached Storages:

Upgrading the Network-Attached Storage (NAS) firmware can improve the system’s overall performance, stability, and security by adding various fixes for related issues, enhancing existing features (or adding support for new ones), or updating different applications.

Due to the high number of NAS manufacturers, as well as network storage types, installing a new firmware might not be always as easy as it appears – and not too safe either. Failing to perform a software update can cause serious malfunctions to the network storage.

So, before you even consider applying this release, carefully read the installation guide and initiate the process only when you have understood and completely familiarized yourself with all the steps.

Moreover, it would be best if you take into account using a UPS unit (Uninterruptible Power Supply) to perform this task, because no power disruption should affect the upgrade.

With all these aspects in mind, after you have read the installation guide, click the download button to apply this firmware version to your NAS. Remember to check back with our website in order to stay up to speed with the latest releases.