In order to combat recent bash vulnerability issues, Thecus today released a Bash patch for both Thecus OS5 and OS6 users. It is strongly recommended that all users update their NAS with this latest firmware.
The patch will fix the GNU Bash Environment Variable Command Injection Vulnerability, also referred to as Shellshock (CVE-2014-6271, CVE-2014-7169, CVE-2014-7187, and CVE-2014-71861), which allows unauthorized users access to remote Unix/Linux-based systems.
For ThecusOS 6, users can download the OS6 Bash offline patch V1.0. The patch is applicable for the following units:
QNAP Systems, Inc. today announced the release of Qvideo for Android, providing Turbo NAS users with a free remote management app for video archiving, streaming, sharing, and more.
Qvideo allows users to play and manage the video collection on their Turbo NAS from their Android devices at anytime. Users can choose from various connection methods that best suits their Internet environment to browse/search their videos via timeline, thumbnails, list and folders. Videos can also be neatly organized by category, tag, rating, or labels, making video archiving and searching easier and more efficient.
With Qvideo, users can stream & download videos for playback on their Android device and also directly upload videos taken by their device to a Turbo NAS. Qvideo makes video sharing easy and convenient by allowing users to create video links they can share via email, message, and social networks.
Add a commentQNAP Systems, Inc. today released QTS 4.1.1 Build 1003 for its Turbo NAS lineup with an official GNU Bash patch update. QNAP's security lab has verified QTS 4.1.1 Build 1003 and confirmed it has fixed all currently known Bash security vulnerabilities. All users (including those who have installed QTS 4.1.1 Build 0927 and Qfix 1.0.1) are strongly advised to upgrade their Turbo NAS to this QTS version.
QTS 4.1.1 Build 1003 has fixed the GNU Bash Environment Variable Command Injection Vulnerability (CVE-2014-6271, CVE-2014-7169, CVE-2014-6277, CVE-2014-6278, CVE-2014-7186, and CVE-2014-7187), also known as "Shellshock," that can allow attackers to gain remote control over UNIX/Linux-based systems. For users who wish to continue using QTS 3.8 to 4.0, QNAP will soon release a Qfix security patch.
Add a commentWD, a Western Digital company and world leader in storage solutions, is expanding its business-class NAS portfolio with the WD Sentinel DX4200 storage server. The WD Sentinel DX4200 is a complete solution using Windows Storage Server, designed to meet the demands of today's small-to-medium sized businesses (SMBs) by combining Windows Storage Server 2012 R2 workgroup operating system and the Intel Atom C2338 Dual Core CPU.
With up to 16 TB of capacity, the WD Sentinel DX4200 enables small businesses to expand their office storage by upgrading the drives as the demands of their businesses grow. The WD Sentinel DX4200 is an ideal backup solution and provides SMBs the advantages of on-premise centralized storage.
Add a commentQNAP Systems, Inc. today released the Qfix 1.0.1 patch for its Turbo NAS lineup to address the GNU Bash Environment Variable Command Injection Vulnerability (CVE-2014-6271, CVE-2014-7169, CVE-2014-6277, CVE-2014-6278, CVE-2014-7186, and CVE-2014-7187), also known as “Shellshock,” that can allow attackers to gain remote control over UNIX/Linux-based systems.
QNAP has previously released QTS version 4.1.1 Build 0927 to resolve CVE-2014-6271 and CVE-2014-7169. With Qfix 1.0.1 more vulnerabilities including CVE-2014-6277, CVE-2014-6278, CVE-2014-7186, and CVE-2014-7187 are now resolved. Users are strongly urged to immediately install Qfix 1.0.1 on their Turbo NAS.
Add a comment