Download [Stable] QTS 4.2.4 Build 0313 | ARM & x86

[Silas Mariusz]

QTS 4.2.4 Build 20170313

[Bug fixes]
- Fixed an issue where an error message would appear when the Docker Certificate expired due to users manually setting the time forward.
- Fixed an issue where RTRR FTP backup jobs would not accept passwords that contained more than 16 characters.
- Fixed an issue where users could not upload files larger than 4 GB in File Station when using Internet Explorer 11.
- Fixed an issue where bluetooth devices would disappear from the device list after Container Station was installed and enabled.
- Fixed an issue where users could not connect a Mac to the NAS when using L2TP/IPsec VPN service.
- Fixed an issue where the System Logs would incorrectly display VPN connections as PPTP when PPTP was enabled.
- Fixed an issue where unexpected errors would occur when key combinations were used consecutively in HybridDesk Station.
- Fixed an issue where users could not use Affinity Photo to edit the photos in NAS shared folders mounted on OS X via AFP.
- Fixed an issue where the system would not automatically check for available firmware updates when users logged in after setting the date format as DD/MM/YYYY.
- Fixed a configuration file vulnerability that could be exploited to compromise the security of sensitive data. (CVE-2017-5227)
- Fixed an Apache HTTP Server vulnerability that could be exploited to deny requests to a server. (CVE-2016-8740)
- Fixed a stack overflow vulnerability that could be exploited to gain control of the EIP register.
- Fixed a SQL injection vulnerability that could be exploited to execute arbitrary SQL commands
- Fixed a command injection vulnerability in transcoding that could be exploited to execute unauthorized commands.
- Fixed a heap overflow vulnerability.
- Fixed a cross-site scripting vulnerability that could be exploited to inject arbitrary JavaScript commands.
- Fixed 2 stack overflow vulnerabilities that could be exploited to cause segmentation faults and gain control of the EIP register.
- Fixed a command injection vulnerability in transcoding that could be exploited to gain the administrator privileges and execute unauthorized commands
- Fixed a command injection vulnerability that could be exploited to gain the administrator privileges and execute unauthorized commands. (CVE-2017-6361)
- Fixed a command injection vulnerability that could be exploited to gain the administrator privileges and execute unauthorized commands. (CVE-2017-6359)
- Fixed an access control vulnerability that would incorrectly restrict authorized user access to resources.
- Fixed 2 stack overflow vulnerabilities.

[Download]
https://eu1.qnap.com/Storage/HS-210TurboNAS/HS-210_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/HS-251/HS-251_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/IS-400/IS-400_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/SS-EC1279U-SAS-RP/SS-1279U_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/SS-EC1879U-SAS-RP/SS-1879U_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/SS-EC2479U-SAS-RP/SS-2479U_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/SS-439ProTurboNAS/SS-439_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/SS-839ProTurboNAS/SS-839_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-1079ProTurboNAS/TS-1079_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-110TurboNAS/TS-110_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-112TurboNAS/TS-112_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-119TurboNAS/TS-119_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-120TurboNAS/TS-120_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-121TurboNAS/TS-121_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-1269U-RP/TS-1269U_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-1270U-RP/TS-1270U_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-1279U-RP/TS-1279U_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-131P_231P_431P_X31+/TS-131P_231P_431P_X31+_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-1679U-RP/TS-1679U_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-210TurboNAS/TS-210_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-212TurboNAS/TS-212_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-219TurboNAS/TS-219_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-220TurboNAS/TS-220_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-221TurboNAS/TS-221_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-239ProTurboNAS/TS-239_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-239HTurboNAS/TS-239H_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-239ProIITurboNAS/TS-239PROII_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-239ProII+TurboNAS/TS-239PROII+_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-259ProTurboNAS/TS-259_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-269ProTurboNAS/TS-269_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-269HTurboNAS/TS-269H_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-410TurboNAS/TS-410_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-410UTurboNAS/TS-410U_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-412TurboNAS/TS-412_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-412UTurboNAS/TS-412U_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-419PTurboNAS/TS-419P_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-419UTurboNAS/TS-419U_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-420TurboNAS/TS-420_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-420UTurboNAS/TS-420U_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-421TurboNAS/TS-421_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-421UTurboNAS/TS-421U_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-439ProTurboNAS/TS-439_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-439ProIITurboNAS/TS-439PROII_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-439ProII+TurboNAS/TS-439PROII+_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-439UTurboNAS/TS-439U_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-459ProTurboNAS/TS-459_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-459UTurboNAS/TS-459U_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-469ProTurboNAS/TS-469_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-469U-RP/TS-469U_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-470ProTurboNAS/TS-470_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-470U-RP/TS-470U_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-509ProTurboNAS/TS-509_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-531P/TS-531P_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-559ProTurboNAS/TS-559_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-563/TS-563_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-569ProTurboNAS/TS-569_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-639ProTurboNAS/TS-639_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-659ProTurboNAS/TS-659_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-669ProTurboNAS/TS-669_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-670ProTurboNAS/TS-670_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-809ProTurboNAS/TS-809_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-809U-RP/TS-809U_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-859ProTurboNAS/TS-859_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-859U-RPTurboNAS/TS-859U_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-869ProTurboNAS/TS-869_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-869U-RP/TS-869U_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-870ProTurboNAS/TS-870_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-870U-RP/TS-870U_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-879ProTurboNAS/TS-879_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-879U-RPTurboNAS/TS-879U_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-X31/TS-X31_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-X31U/TS-X31U_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-X35/TS-X35_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-X51/TS-X51_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-X51A/TS-X51A_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-X51U/TS-X51U_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-X53/TS-X53_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-X53A/TS-X53A_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-X53S/TS-X53S_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-X53U/TS-X53U_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-X63U/TS-X63U_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-X80/TS-X80_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-X80U/TS-X80U_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-X82/TS-X82_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TS-X89U/TS-X89U_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TVS-X63/TVS-X63_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TVS-X71/TVS-X71_20170313-4.2.4.zip
https://eu1.qnap.com/Storage/TVS-X71U/TVS-X71U_20170313-4.2.4.zip

 

[badziewiak]

Fajnie że to załatali, ale litości, żeby w stabilnym oprogramowaniu było tyle dziur bezpieczeństwa??!! Dla użytkowników wewnątrz LAN nie ma to znaczenia. Ja mam wystawiony swój NAS na świat...

 

[Silas Mariusz]

w00t
No a w systemach operacyjnych to nie ma dziur?

 

[badziewiak]

Są, oczywiście że są. Super że ktoś nad tym czuwa i łata QTSa. Sam zajmuję się amatorsko programowaniem i wiem, że błędów nie da się uniknąć. Błędy bezpieczeństwa są tym trudniejsze do wykrycia, bo funkcjonalnie działa i czujność jest uśpiona. Czy te same błędy bezpieczeństwa występują w ubuntu, z którego zrobili QTSa? Jeśli tak, to są usprawiedliwieni. Jeśli nie, to budzi moje zdziwienie (lekkie).

 

[Silas Mariusz]

Dla przykładu:
CVE-2016-8740 - Red Hat Customer Portal
CVE - CVE-2016-8740

 

[badziewiak]

Ok ok, dobrze że to łatają. A przy okazji, to miło stwierdzić, że niedawno naprawili dwa błędy funkcjonalne: W virtualization station i cloud drive sync. Zgłaszałem im to od czasu jak wyszła wersja QTS 4.2. Robili kilka podejść. Cloud drive sync już sobie odpuściłem i przeszedłem całkowicie na Qsync, ale widocznie ktoś ich jeszcze molestował i poprawili problem z uprawnieniami plików.

 

[TAPICER]

Taa coby tu napisać ? Myślę że sprzetowy firewall plus router z antywirusem zalatwi wiele klopotów. tak po prawdzie pnp of zmienia wszystko

 

[badziewiak]

Taa coby tu napisać ?(...)

Złe podejście. Raczej powinno być: Dodam coś istotnego do dyskusji lub zapytam o to i tamto, bo czegoś nie wiem a jest to dla mnie istotne. W pozostałych przypadkach to marnowanie czyjegoś czasu na kliknięcie w temat.