Can anyone tell me how to install CVE-2017-7494 patch??

Printers, HDDs, USB/eSATA drives, 3rd-party programs
Post Reply
wching02
New here
Posts: 8
Joined: Wed Dec 18, 2013 12:25 pm

Can anyone tell me how to install CVE-2017-7494 patch??

Post by wching02 »

Can anyone tell me how to install CVE-2017-7494 patch??
JemTheWire
Starting out
Posts: 23
Joined: Sat Apr 25, 2015 9:09 pm

Can anyone tell me how to install CVE-2017-7494 patch??

Post by JemTheWire »

Download patch from the QNAP site. Unzip it so you have a .qfix file. From your NAS, proceed as if you were doing a firmware update.
From the Firmware Update page, browse to where you unzipped the .gfix file and install just as you would do for a 'conventional' firmware update.
TVS-471
User avatar
Moogle Stiltzkin
Guru
Posts: 11445
Joined: Thu Dec 04, 2008 12:21 am
Location: Around the world....
Contact:

Re: Can anyone tell me how to install CVE-2017-7494 patch??

Post by Moogle Stiltzkin »

in addition there are methods to verify if the patch is effective. in another user's thread i posted the link to that. you can use the search find it.
NAS
[Main Server] QNAP TS-877 (QTS) w. 4tb [ 3x HGST Deskstar NAS & 1x WD RED NAS ] EXT4 Raid5 & 2 x m.2 SATA Samsung 850 Evo raid1 +16gb ddr4 Crucial+ QWA-AC2600 wireless+QXP PCIE
[Backup] QNAP TS-653A (Truenas Core) w. 4x 2TB Samsung F3 (HD203WI) RaidZ1 ZFS + 8gb ddr3 Crucial
[^] QNAP TL-D400S 2x 4TB WD Red Nas (WD40EFRX) 2x 4TB Seagate Ironwolf, Raid5
[^] QNAP TS-509 Pro w. 4x 1TB WD RE3 (WD1002FBYS) EXT4 Raid5
[^] QNAP TS-253D (Truenas Scale)
[Mobile NAS] TBS-453DX w. 2x Crucial MX500 500gb EXT4 raid1

Network
Qotom Pfsense|100mbps FTTH | Win11, Ryzen 5600X Desktop (1x2tb Crucial P50 Plus M.2 SSD, 1x 8tb seagate Ironwolf,1x 4tb HGST Ultrastar 7K4000)


Resources
[Review] Moogle's QNAP experience
[Review] Moogle's TS-877 review
https://www.patreon.com/mooglestiltzkin
User avatar
Johnno72
Easy as a breeze
Posts: 378
Joined: Fri Jul 31, 2015 1:35 pm
Location: Australia

Re: Can anyone tell me how to install CVE-2017-7494 patch??

Post by Johnno72 »

Moogle, can you verify this patch working ok so far as you know
OS: Win10 Professional v2004 OS Build 19041.388 x64
NAS: QNAP TS-EC2480U-RP 16G 24 Bay - Firmware: v4.4.3.1421 build 20200907. Updated from v4.4.3.1400 Build 20200817 Official
StoragePool / DataVol: Storage Pool 1 / DataVol1: Single 29.04TB - Thick Volume: 29TB
HDD's: Western Digital - Model: WDC WD4001FFSX-68JUN0 Red Pro NAS 3.5"
HDD Size: 4TB - HDD Firmware all HDD's: 81.00A81
RAID Configuration: RAID6 x 10, HotSpare x 1, ColdSpare x 1 - Network: 1GbE
UPS: CyberPower PR3000ELCDRT2U Professional Rackmount LCD 3000VA, 2250W 2U Line Interactive UPS
QNAP Hardware details required: viewtopic.php?f=5&t=68954
Remote Administration of: TVS-863+ 16G on UPS Cyberpower OLS1500E+RMcard205
User avatar
Moogle Stiltzkin
Guru
Posts: 11445
Joined: Thu Dec 04, 2008 12:21 am
Location: Around the world....
Contact:

Re: Can anyone tell me how to install CVE-2017-7494 patch??

Post by Moogle Stiltzkin »

Johnno72 wrote:Moogle, can you verify this patch working ok so far as you know
i read somebody verified it worked after they restarted once they patched it. i'm no expert but i'll take that as it's fixed :]

i posted quite a bit on this topic here
viewtopic.php?f=11&t=133018#p617765
NAS
[Main Server] QNAP TS-877 (QTS) w. 4tb [ 3x HGST Deskstar NAS & 1x WD RED NAS ] EXT4 Raid5 & 2 x m.2 SATA Samsung 850 Evo raid1 +16gb ddr4 Crucial+ QWA-AC2600 wireless+QXP PCIE
[Backup] QNAP TS-653A (Truenas Core) w. 4x 2TB Samsung F3 (HD203WI) RaidZ1 ZFS + 8gb ddr3 Crucial
[^] QNAP TL-D400S 2x 4TB WD Red Nas (WD40EFRX) 2x 4TB Seagate Ironwolf, Raid5
[^] QNAP TS-509 Pro w. 4x 1TB WD RE3 (WD1002FBYS) EXT4 Raid5
[^] QNAP TS-253D (Truenas Scale)
[Mobile NAS] TBS-453DX w. 2x Crucial MX500 500gb EXT4 raid1

Network
Qotom Pfsense|100mbps FTTH | Win11, Ryzen 5600X Desktop (1x2tb Crucial P50 Plus M.2 SSD, 1x 8tb seagate Ironwolf,1x 4tb HGST Ultrastar 7K4000)


Resources
[Review] Moogle's QNAP experience
[Review] Moogle's TS-877 review
https://www.patreon.com/mooglestiltzkin
User avatar
Johnno72
Easy as a breeze
Posts: 378
Joined: Fri Jul 31, 2015 1:35 pm
Location: Australia

Re: Can anyone tell me how to install CVE-2017-7494 patch??

Post by Johnno72 »

I just jumped in and performed the manual update patch, all went ok, the reboot actually took at 1 minute 47 seconds longer... simply could not access the NAS even though it showed as connected to the network. All appears OK so far.
OS: Win10 Professional v2004 OS Build 19041.388 x64
NAS: QNAP TS-EC2480U-RP 16G 24 Bay - Firmware: v4.4.3.1421 build 20200907. Updated from v4.4.3.1400 Build 20200817 Official
StoragePool / DataVol: Storage Pool 1 / DataVol1: Single 29.04TB - Thick Volume: 29TB
HDD's: Western Digital - Model: WDC WD4001FFSX-68JUN0 Red Pro NAS 3.5"
HDD Size: 4TB - HDD Firmware all HDD's: 81.00A81
RAID Configuration: RAID6 x 10, HotSpare x 1, ColdSpare x 1 - Network: 1GbE
UPS: CyberPower PR3000ELCDRT2U Professional Rackmount LCD 3000VA, 2250W 2U Line Interactive UPS
QNAP Hardware details required: viewtopic.php?f=5&t=68954
Remote Administration of: TVS-863+ 16G on UPS Cyberpower OLS1500E+RMcard205
ensignvorik
Easy as a breeze
Posts: 365
Joined: Sat Jul 14, 2012 8:24 pm

Re: Can anyone tell me how to install CVE-2017-7494 patch??

Post by ensignvorik »

I'm currently on 4.3.3.0154 Build 20170413 and have applied this patch.

I'll probably get round to upgrading the firmware this weekend to 4.3.3.0188 build 20170516

Will I need to re-apply this fix after doing the minor firmware update taking into account the fix was released after the current latest stable firmware.
Unless I'm being blind, I can't find the setting to change what kind of QNAP I have on my profile. I now own a TS-253A
User avatar
schumaku
Guru
Posts: 43578
Joined: Mon Jan 21, 2008 4:41 pm
Location: Kloten (Zurich), Switzerland -- Skype: schumaku
Contact:

Re: Can anyone tell me how to install CVE-2017-7494 patch??

Post by schumaku »

ensignvorik wrote:Will I need to re-apply this fix after doing the minor firmware update taking into account the fix was released after the current latest stable firmware.
Yes, you have to re-apply the fix. There are no firmware images available yet inheriting it.
Post Reply

Return to “Hardware & Software Compatibility”