QNAP TS-1253U-RP TurboNAS QTS Firmware 4.2.4 Build 20170313

Changes:

[Bug Fixes]

- Fixed an issue where an error message would appear when the Docker Certificate expired due to users manually setting the time forward.
- Fixed an issue where RTRR FTP backup jobs would not accept passwords that contained more than 16 characters.
- Fixed an issue where users could not upload files larger than 4 GB in File Station when using Internet Explorer 11.
- Fixed an issue where bluetooth devices would disappear from the device list after Container Station was installed and enabled.
- Fixed an issue where users could not connect a Mac to the NAS when using L2TP/IPsec VPN service.
- Fixed an issue where the System Logs would incorrectly display VPN connections as PPTP when PPTP was enabled.
- Fixed an issue where unexpected errors would occur when key combinations were used consecutively in HybridDesk Station.
- Fixed an issue where users could not use Affinity Photo to edit the photos in NAS shared folders mounted on OS X via AFP.
- Fixed an issue where the system would not automatically check for available firmware updates when users logged in after setting the date format as DD/MM/YYYY.
- Fixed a configuration file vulnerability that could be exploited to compromise the security of sensitive data. (CVE-2017-5227)
- Fixed an Apache HTTP Server vulnerability that could be exploited to deny requests to a server. (CVE-2016-8740)
- Fixed a stack overflow vulnerability that could be exploited to gain control of the EIP register.
- Fixed a SQL injection vulnerability that could be exploited to execute arbitrary SQL commands
- Fixed a command injection vulnerability in transcoding that could be exploited to execute unauthorized commands.
- Fixed a heap overflow vulnerability.
- Fixed a cross-site scripting vulnerability that could be exploited to inject arbitrary JavaScript commands.
- Fixed 2 stack overflow vulnerabilities that could be exploited to cause segmentation faults and gain control of the EIP register.
- Fixed a command injection vulnerability in transcoding that could be exploited to gain the administrator privileges and execute unauthorized commands
- Fixed a command injection vulnerability that could be exploited to gain the administrator privileges and execute unauthorized commands. (CVE-2017-6361)
- Fixed a command injection vulnerability that could be exploited to gain the administrator privileges and execute unauthorized commands. (CVE-2017-6359)
- Fixed an access control vulnerability that would incorrectly restrict authorized user access to resources.
- Fixed 2 stack overflow vulnerabilities.

Firmware Update:

- Read the firmware release notes from above and make sure it is necessary to update the firmware.
- Download the NAS firmware and unzip the IMG file to the computer.
- Before updating the system firmware, back up all the NAS data to avoid any potential data loss from unforeseen issues arising during the system update.
- Click "Browse" to select the firmware image for the system update. Click "Update System" to update the firmware.
- The system update may take seconds, minutes or longer to complete depending on the network connection status. The NAS will inform you when the system update has completed.

Note:

- If the system is running properly, you do not need to update the firmware.
- QTS does not support downgrading the firmware. However, if you choose to apply an older firmware version, please back up all of your important data before downgrading. QNAP is not responsible for any damage to the NAS or its contents after downgrading.

About Network-Attached Storage Updates:

Upgrading the Network-Attached Storage (NAS) firmware can improve the system’s overall performance, stability, and security by adding various fixes for related issues, enhancing existing features (or adding support for new ones), or updating different applications.

Due to the high number of NAS manufacturers, as well as network storage types, installing a new firmware might not be always as easy as it appears – and not too safe either. Failing to perform a software update can cause serious malfunctions to the network storage.

So, before you even consider applying this release, carefully read the installation guide and initiate the process only when you have understood and completely familiarized yourself with all the steps.

Moreover, it would be best if you take into account using a UPS unit (Uninterruptible Power Supply) to perform this task, because no power disruption should affect the upgrade.

With all these aspects in mind, after you have read the installation guide, click the download button to apply this firmware version to your NAS. Remember to check back with our website in order to stay up to speed with the latest releases.