Synology released DiskStation Manager not long ago with numerous updates in version 6.2, but the work is not finished with one release, because you always find something that can be improved afterwards – on the other hand, of course, by using numerous server components, there is always something to keep an eye on if security vulnerabilities become public.
In the case of the current DiskStation Manager in version 6.2-23739-1, it is a mix. Synology is fixing security holes here, including one known in the Linux kernel and some of its own. These vulnerabilities allow authenticated remote users to execute arbitrary operating system commands or obtain sensitive information about a vulnerable version of Synology Diskstation Manager (DSM).
They also want to improve the performance of the surveillance station when deleting images from a btrfs volume.
The update is expected to be available to all users in the next few days, although the time of release may vary slightly. The update requires a restart.
Changelog
- Fixed a security vulnerability regarding Linux kernel (CVE-2018-8897).
- Enhance the performance of Surveillance Station when deleting recordings in btrfs volume.
- Fixed multiple security vulnerabilities. (Synology-SA-18:33)
- Fixed an issue where VAAI might fail after iSCSI LUN was recovered by LUN Backup.
- Fixed an issue where LUN configuration might be inconsistent.
- Minor bug fixes.