Security Vulnerabilities Addressed in QTS 4.2.3 Builds 20170121 and 20170124

Summary

QTS 4.2.3 Builds 20170121 and 20170124 include security fixes for the heap overflow vulnerability reported by bashis and the firmware update vulnerabilities reported by F-Secure.

Note: Install the appropriate build for your NAS model.
Build 20170124: TS-809 and TS-809U only
Build 20170121: All other models

Solution

Installing the Update

1. Download the package from the QNAP Download page: https://www.qnap.com/download/.
2. Log on as administrator to the QTS web console.
3. Go to "Control Panel" > "System" > "Firmware Update" > "Firmware Update".
4. Click "Browse" and then locate the package on your computer.
5. Click "Update System".

Note: After manually installing the update, you can choose to enable live updates from the Live Update tab.

If you have any questions regarding this issue, please contact us at http://helpdesk.qnap.com/