Polskie Forum Synology

Version: 5.2-5967
(2016/04/28)

What's New
This update includes all bug fixes as well as security fixes in the previously released updates since DSM 5.2-5644.
Fixed Issue
Improved performance of backup tasks and data restoring in Backup & Restore.
Improved backup stability in Backup & Restore when files are being edited.
You may now choose to reset the system without resetting the password at Control Panel > Update & Restore.
Added full-speed fan mode to provide the best cooling effects for Synology NAS.
Fixed multiple vulnerabilities regarding Samba module (CVE-2016-2118, CVE-2015-5370, CVE-2016-2110, CVE-2016-2111, CVE-2016-2112, CVE-2016-2113, CVE-2016-2114, CVE-2016-2115).
Fixed an issue where iSCSI service could not start upon system boot with snapshot retention policy enabled in DSM 5.2-5644.
Fixed an issue where iSCSI service could not respond under certain conditions when LUN was being created or removed.
Fixed an issue where the system could not enter hibernation with Snapshot Manager for VMware registered.
To enhance the security level, Synology's default administrator account "admin" with the blank password will no longer be allowed and will be disabled after this update. It is also highly recommended that you increase the password strength of all accounts belonging to the administrators group.
Fixed an issue where permission settings for a shared folder could not be edited in Windows if the folder was mounted via SMB.

Version: 5.2-5967-1
(2016/05/11)

Upgraded NTP to 4.2.8p7 to address multiple vulnerabilities (CVE-2016-1547, CVE-2016-1548, CVE-2016-1549, CVE-2016-1550, CVE-2016-1551, CVE-2016-2516, CVE-2016-2517, CVE-2016-2518, CVE-2016-2519).
Upgraded OpenSSL to 1.0.1t to address multiple vulnerabilities (CVE-2016-2105, CVE-2016-2106, CVE-2016-2107, CVE-2016-2108, CVE-2016-2109, CVE-2016-2176).
Before the official patch is released, workaround is applied to mitigate multiple vulnerabilities of ImageMagick module (CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717, CVE-2016-3718).

Version: 5.2-5967-2
(2016/07/27)

Applied the workaround to mitigate a security vulnerability of libupnp module (CVE-2016-6255).