+++ Release notes - Firmware 4.3.3.0408 +++

• Fixed a bug that caused the NAS to reboot periodically if an iSCSI target is set up on the system.
  It may be necessary to re-enable iSCSI target service after update in order to make connection with initiator working again. Open Storage Manager > iSCSI Storage > Settings > Enable iSCSI target service. Click "Apply" even if "Enable iSCSI target service" appears as already enabled.

+++ Release notes - Firmware 4.3.3.0398 +++

[IMPORTANT NOTES]

• This will be the last feature release for the CELVIN NAS models Q600, Q700, Q703. Important bugfix releases may still be provided if necessary.

• This feature release will not be available for CELVIN NAS Q800. Important bugfix releases may still be provided if necessary.

• The Qsync software on PC must be upgraded to the latest version to work with this firmware

• In this update, RAID scrubbing is automatically scheduled to run on the first day of every month at 02:15. RAID scrubbing checks the data integrity of all RAID 5 and RAID 6 groups on the NAS. Running this check regularly is recommended. Storage performance might be degraded while RAID scrubbing is running. You can modify the schedule at "Storage Manager" > "Global Settings" > "RAID Scrubbing".

• Changed the warning and error log entries created when the NAS finds a RAID bad block or bad stripe.

• After updating the NAS managed by Q'center from 4.2.x to 4.3.x, the administrator of Q'center must input the password of each NAS to continue monitoring.

• The Volume Snapshot and Virtual Switch feature are not available for QR802, Q802 and Q902.

• When Firmware 4.3.x is installed on NAS models running on 64-bit Intel and AMD processors, some applications may no longer be supported.

• Some of the functions mentioned in the fixed bug list may not exist in your model.

[SECURITY FIXES]

• Fixed multiple buffer overflow vulnerabilities that could allow for remote code execution (CVE-2017-17029, CVE-2017-17030, CVE-2017-17031, CVE-2017-17032, CVE-2017-17033).

• Fixed a vulnerability in Samba to prevent heap memory leak (CVE-2017-15275).

• Fixed a use-after-free vulnerability in Samba (CVE-2017-14746).

• Fixed multiple vulnerabilities in WPA2 to prevent the exposure of sensitive information via Wi-Fi networks (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13084, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088).

• Fixed a vulnerability in the Linux kernel (CVE-2017-1000253).

• Fixed a TCP sequence number prediction vulnerability that could be exploited to cause a denial of service.

• Fixed multiple stack overflow vulnerabilities that could allow for remote command execution.

• Fixed an "Orpheus' Lyre" vulnerability in Samba that could be exploited to bypass authentication mechanisms (CVE-2017-11103).

• Updated the version of OpenSSH to 7.5 to fix an information disclosure vulnerability.

• Updated the version of SAMBA to fix multiple vulnerabilities regarding SMB signing (CVE-2017-12150), encryption across DFS redirections (CVE-2017-12151), and server memory information leakage (CVE-2017-12163).

• Fixed an information exposure vulnerability to prevent unauthorized access to sensitive information (CVE-2017-7630).

• Changed the access permissions for the files "/etc/passwd", "/etc/group", and "/etc/shadow" to enhance data security.

• Fixed a vulnerability in the Linux kernel that could be exploited to circumvent the stack guard page (CVE-2017-1000364).

• Updated the version of MariaDB to 5.5.57 to fix multiple vulnerabilities.

• Updated the version of PHP to 5.6.31 to fix multiple vulnerabilities.

• Fixed multiple command injection vulnerabilities.

• Updated the version of the Portable UPnP SDK (libupnp) to 1.6.22 to fix a vulnerability that could allow for unauthorized modification to arbitrary files (CVE-2016-6255) and a heap overflow vulnerability that could be exploited to execute arbitrary code or cause a denial of service (CVE-2016-8863).

• Fixed a command injection vulnerability in Media Library that could allow for remote command execution (CVE-2017-13067).

• Fixed an OS command injection vulnerability in Backup Station.

• Fixed multiple OS command injection vulnerability in the Control Panel.

• Fixed a vulnerability in ActiveX controls that could allow for arbitrary code execution on the web client.

• Fixed a cross-site scripting vulnerability in Storage Manager.

• Fixed a cross-site scripting vulnerability in Backup Station.

• Fixed a denial-of-service vulnerability regarding the ntpd (Network Time Protocol daemon).

• Fixed multiple security vulnerabilities regarding input validation and access control.

• Fixed a remote code execution vulnerability in Samba. (CVE-2017-7494)

• Fixed multiple security vulnerabilities regarding input validation and access control.

• Fixed a password change vulnerability (CVE-2017-7629).

• Fixed a command injection vulnerability (CVE-2017-7876).

[NEW FEATURES / CHANGES / ENHANCEMENTS]

• Enhanced the interface of the log-in screen and desktop.

• Added 64 bit support for firmware and apps for x86-based NAS (Q802, Q902, Q805, Q905, QR806, QR1006).

• Added support for viewing the details of CPU usage, the status of processes, and the activity of storage pools in Resource Monitor.

• Added additional audio alerts

• Added support for Samba 4.4.

• Added support for NFSv4 with support for IPv6

• Added support for HTTP/2 (x86 models only).

• Added support for PHP 5.6

• Added support for redundant domain controllers.

• Added support for connecting to the Internet via PIX-MT100 LTE USB dongle.

• Added support for sending notification mails in plain text.

• Added support for mounting remote folders using WebDAV.

• FTP connections can now have higher speed transfers.

• Users can now be forced to change their passwords on a regular basis.

• Privilege settings have been added for domain users.

• The unmapped iSCSI LUN list has been added to the to iSCSI Target List.

• [WebUI] More customization options have been added to the login screen.

• [Storage Manager] Added the ability for Qtier to automatically tier data when the CPU/system is idle.

• [Storage Manager] Added support for viewing and managing external devices in tree structures.

• [Storage Manager] Added the option to erase external storage devices.

• [Storage Manager] Added support for the linear expansion of static volumes through expansion units.

• [Storage Manager] Added new disk icons in Storage Manager to help distinguish between HDDs and SSDs.

• [Storage Manager] Added support for creating read/write cache with single drive, RAID 0, RAID 1, and RAID 10 configurations.

• [Storage Manager] Users can now obtain support for exFAT file system through purchasing the exFAT driver license.

• [Storage Manager] Added support for installing up to 4 REXP-1000 Pro expansion units on the TVS-x73 series.

• [Snapshot] Added support for snapshot timeline mode.

• [Snapshot] A warning message has been added to inform users about apps that may be affected when the contents of a snapshot are restored.

• [Snapshot] When reverting to a snapshot, a warning message will now display apps that will be affected after the reversion.

• [File Station] Added a rename policy for filename conflicts when copying/moving files.

• [File Station] Settings are now provided for other NAS users to use on-the-fly transcoding.

• [File Station] Remote connection now supports automatically finding local devices.

• [File Station] Enhanced the File Station UI to provide a better user experience.

• [File Station] Enhanced the UI of the share link page on mobile devices.

• [File Station] File integrity is now checked when copying/moving files.

• [File Station] Qsync team folders can now be accessed in File Station.

• [File Station] Add support for creating a snapshot shared folder with dedicated volume.

• [File Station] Added support for external USB/SATA optical disc drives. File Station can now read optical discs used for data storage purposes. Note that this feature is not available on Q600, Q700, Q703, Q802, Q902.

• [Virtual Switch] Added support for the combination of different physical adapters, virtual adapters. of virtual machines, virtual adapters of containers, and Thunderbolt interfaces.

• [Virtual Switch] Added support for STP (Spanning Tree Protocol) to prevent network loops.

• [Virtual Switch] Added support for NAT (Network Address Translation).

• [Virtual Switch] Virtual switches can now be set as the default gateway.

• [QVPN] Integrated VPN Server and Client into QVPN Service.

• [QVPN] Added support for L2TP/IPsec VPN clients.

• [QVPN] OpenVPN clients now support importing OVPN files to establish connections.

• [QVPN] Added support for domain users to use VPN services.

• Enhanced the Help Center UI to provide a better user experience.

• Users can now choose to compress the automatically saved logs.

• Enhanced the Notification UI.

• Enhanced the user interface of notification emails.

• Enhanced the push service.

• A warning message has been added to confirm the removal of shared folders.

• Warning event notifications are now provided when volumes are locked.

• Resource Monitor is now an App.

• Apps can now send notifications and be automatically updated.

• Port trunking general warnings have been replaced with individual warnings.

• Users can now examine the change in network status after a system restart.

• Network & Virtual Switch now provides Basic Mode and Advanced Mode to meet different needs.

• Added support for replicating snapshot vault volumes/LUN to the another remote snapshot vault.

• Time Machine now supports the SMB protocol.

• Added a message to remind users that the performance of domain controllers may be affected if the system memory is less than 2 GB.

• Added the option to execute an autorun script upon NAS startup (disabled by default) in "Control Panel" > "System" > "Hardware" > "General".

• Storage Manager now displays error messages when the SSD cache size exceeds the maximum allowable capacity on the QEx07 models.

• Users can now take snapshots even when the CPU usage is over 80%.

• Added support for the USB 3.1 PCIe card USB-U31A2P01 for QR806/QR1006

[BUG FIXES]

• WebUI would occasionally display incorrect error messages about domain controller disconnection.

• WebUI would occasionally stop responding when running antivirus scan jobs.

• Download Station would lose Internet connection after running multiple download tasks for over 10 hours.

• Resource Monitor would not correctly display CPU or memory usage when the NAS had more than 1000 user connections.

• Custom fan settings would not be applied when the NAS woke up from the sleep mode.

• Removing a volume after enabling Qtier might cause a disk to become abnormal and a RAID group to become degraded.

• After connecting two printers with the same model name to the NAS via Samba, only one of them would be detected.

• Users could not expand the size of a volume to over 16 TB on the QEx07 series.

• Download Station could not run BT download tasks after users enabled proxy connection.

• Sending wake-on-LAN packets when starting the NAS would make the NAS unable to shut down correctly.

• Download Station sometimes would not move downloaded files to specified destination folders after completing BT download tasks.

• Media Library would stop responding and the default media folder would disappear when generating thumbnails for certain JPEG images.

• Gmail Backup could not migrate mails from one Gmail account to another account.

• Log files exported from System Connection Logs would not display the connection types of VPN connections.

• A database error would occur when multiple users uploaded and deleted files via Qsync Client at the same time.

• Users could not copy files named in Polish from the NAS to external drives with certain file systems.

• Administrators could create private shared folders for multiple users even when there were no volumes on the NAS.

• Syslog Viewer could not display log entries if the Syslog log file was placed in a folder that contained a whitespace character in its folder name.

• Random disk errors would occur when users connected the UX-1200U-RP expansion unit to the QR1006.

• Users could not configure certain settings when creating an RTRR SMB backup job in Backup Station.

• Disabling advanced folder permissions would affect the ACL settings on Windows.

• The NAS would shut down unexpectedly after users created shared folders in certain paths and then ran antivirus scan jobs.

• Download Station would go offline when a certain configuration file was corrupted.

• SSL Certificate would be repeatedly installed whenever users unlocked an encrypted volume.

• After mapping a NAS shared folder as a network drive on Windows, users could not change folder names that contained more than 8 characters on this network drive.

• Users could not restore files from a snapshot if their file paths contained Korean.

• Resource Monitor would be repeatedly installed whenever users unlocked an encrypted volume.

• File Station would incorrectly count the number of selected files when users selected files and folders at the same time.

• Users could not create virtual disks with Chinese names in "Storage Manager" > "Remote Disk".

• NAS-to-NAS backup jobs sometimes would fail due to unexpected errors on certain ARM models.

• HD Player would not be correctly displayed when users accessed HybridDesk Station on a browser via Remote Desktop.

• It would take a long time to delete multiple user accounts after granting them permissions to access a large number of files.

• Control Panel could not correctly display the DNS tree structure after users installed Python 2.7.12.

• Media Library would keep indexing files after users uploaded .flac files to the NAS.

• The USB LED on the NAS would keep blinking after users ejected a Transcend JetFlash USB drive.

• Users would encounter unexpected formatting errors when sending emails using IIS 6.0 as the SMTP server.

• Local user accounts could not share the same usernames with domain user accounts.

• Owners of shared folders could not access their folders when their access were denied in advanced folder permission settings.

• Syslog Viewer would display incorrect facility names.

• Users could not upload files larger than 2 GB to the QEx05 series.

• Domain users could not access shared folders via FTP where they were granted access permissions.

• Special symbols in file names would be converted inconsistently when users uploaded files to the NAS via both AFP and SMB.

• System Connection Logs would display the connection type as HTTP when users accessed Download Station via HTTPS.

• It would take a long time for the Control Panel to display all domain users if the domain had a large number of users and groups.

• Resource Monitor can correctly display CPU and memory usage when users enable version control for Qsync and then synchronize a large number of files.

• Users' Freebox routers would output data in an unexpected XML format.

• Users could not enable Web Server after enabling secure connection (HTTPS) in Control Panel.

• Users could not access HybridDesk Station via Remote Desktop when enabling secure connection (HTTPS).

• The NAS could not enter the disk standby mode when using a USB Wi-Fi dongle to connect to a network via an access point.

• Users could not access their Microsoft OneDrive for Business folders in File Station after installing Connect to Cloud Drive.

• Users could not back up the LDAP database to a specified location after joining the NAS to an LDAP directory.

• The details of users would not be displayed in "Control Panel" > "Privilege" > "User Groups" when the group name contained certain characters.

• Users could not access folders with circular symbolic links via AFP.

• File Station could not correctly display the properties of Qsync files or folders.

• When users synced the same shared folder to two devices using two accounts, some synced files would be missing on one of the devices.

• Duplicate files might appear in the destination folder when users uploaded a large number of files to the synced shared folder.

• Qsync could not sync the files in a shared folder if the option "Only admin can create files/folders" was enabled for its parent folder.

• Active Directory users could not access the previous versions of a shared folder on Windows.

• Active Directory users would not be immediately blocked from or logged out of Qsync after the NAS left an - Active Directory domain.

• Remote controls might not function correctly after the NAS woke up from the S3 Sleep Mode.

• Users could not complete upload tasks when uploading large files to Amazon Drive.

• Users could not join the NAS to an Active Directory domain if SMB1 was disabled on the Active Directory server.

• The NAS occasionally could not connect to the Internet after users created a virtual switch with the system default gateway.

• Backup Station could not correctly display the time left, the transfer speed, or the job status of RTRR FTP jobs in the "Job Status and Logs".

• After uploading files from a Mac to a NAS shared folder, users could not transfer the files to Windows 7 or Windows Server 2008.

• Fans would rotate at an abnormally high speed after users set the fans to the Quiet Mode and then restarted the NAS.

• After restarting the NAS when migrating the folder to an encrypted folder, users could not access a shared folder via SMB.

• The settings of the primary DNS server would not be correctly configured when Domain Controller was enabled.

• Antivirus scan jobs could not be completed if users uploaded renamed virus definition files.

• Non-admin users could not run NAS-to-NAS backup jobs on Backup Station.

• Users could not back up the files in certain paths to an external storage device using USB One Touch Copy.

• Duplicate users would appear as user groups after administrators granted folder permissions to domain users via Windows ACL.

• Administrators could not grant users permission to access the NAS via SSH if their usernames contained a whitespace character.

• Users could not enable RAID Scrubbing again if they did not modify the previous RAID Scrubbing schedule.

• The Control Panel interface would take longer to respond when users added a large number of IP addresses to the blacklist or whitelist.

• Users could not access the NAS when using Firefox 54.0.1 and Java 8 Update 144 - (32-bit).

• Some NFS shared folders would not be mounted after users restarted the NAS.

• The domain controller list can correctly display domain controllers that have two assigned DNS IP addresses.

• Storage Manager can correctly display the IQN when users create an iSCSI target.

• Users can create files that have filenames beginning with "._" without encountering unexpected error messages when accessing a shared folder via SMB.

• Photo Station sometimes could not display the photos uploaded to the home folder in "Private Collection".

• Network connection would occasionally time out on the QEx07 models.

• Copied files would become corrupted when users connected to the NAS via SMB and then copied and pasted files within the same shared folder on an encrypted volume.

• The NAS would take snapshots regardless of whether data had been modified even when "smart snapshot" was enabled.

• RTRR FTP backup jobs from a CELVIN NAS to a non-CELVIN NAS would take longer than expected.

• Backup Station could not display remote folders in a tree view when users created remote-to-local RTRR FTP backup jobs.

• Formatting an external drive while using HybridDesk Station would cause the login screen of HybridDesk Station to disappear.

• On certain ARM models, users could not save any changes made to the files in a mounted shared folder using a Windows PC after the files were modified on a Mac.

• Certain models did not provide the option to select the highest version of SMB.

• Users could not access the content of an encrypted shared folder after locking and then unlocking the folder.

• Temporary folders would appear on the shared folder list when users took a snapshot while restoring a shared folder on Snapshot Manager.

• On certain models, the "RAID Scrubbing" option for legacy volumes on Storage Manager would be grayed out and could not be selected.

• Users sometimes could not connect to the NAS via Samba using the hostname.

• Non-administrator users could delete the files in the Recycle Bin even when they were not granted such permissions.

• Copied files do not become corrupted when users connect to the NAS via SMB and then copy and paste files within the same shared folder on an encrypted volume.

• Photo Station and Video Station can successfully generate thumbnails for photos and videos on the ARM models.

• Backup Station can correctly display destination folders in a tree view when users create a local-to-remote CIFS/SMB RTRR job.

• Users can perform NAS-to-NAS backup jobs when an external drive formatted in NTFS is connected to the NAS and when the option "Replicate ACL and extended attributes" is enabled in Backup Station.

• Resource Monitor can correctly display the line chart for the CPU usage when users open the management screen for a storage pool on Storage Manager.

• Users can disable schedule options when creating a snapshot schedule on Storage Manager.

• Guest users can be successfully directed to the root directories where they are granted access permissions when connecting to the NAS via FTP.

• The user interface in "Control Panel" > "Applications" > "Web Server" > "Virtual Host" now functions as expected.

• Users can create local-to-remote RTRR backup jobs for shared folders when connecting from a Mac via SMB.

• The volume labels of external drives can be changed to user-specified names when users format the drives to NTFS.

• Users can log on to the WebUI as "admin" without being affected by unexpected errors in certain configuration files.

• No disk I/O errors occur when an external storage device is selected as the destination for cloud-to-local sync jobs on Hybrid Backup Sync.

• Download Station does not lose connection when multiple download tasks are completed in a short period of time.

• The NAS can still join an Active Directory domain when SMB 1 is disabled on the Active Directory server.

• No connection issues occur when users access certain VPN servers via L2TP/IPSec or OpenVPN using QVPN.

• Temporary folders can be successfully deleted after users finish backing up files from the CELVIN NAS to non-CELVIN NAS devices via RTRR.

• Users can successfully delete a large number of LUNs using Cinder without causing Storage Manager interface to stop responding.

• The system does not erroneously display the message "update failed" when users enable or disable antivirus in Control Panel.

• System logs do not display unexpected errors when users back up files from the NAS to external devices twice using Backup Station.

• Non-admin users in the administrator group can successfully log on to NAS again via SSH.

• Resource Monitor can correctly display CPU and memory usage when users enable version control for Qsync and then synchronize a large number of files.

• Users can directly open the folder of downloaded files when clicking a completed download task in Download Station.

• Users can no longer access the "Homes" folder via FTP when the folder permissions are denied.

• Users can still access the "Multimedia" folder and add media folders after uploading certain folders via File Station.

• Fixed Group users could not access via SMB the shared folders where they were granted access permissions after the NAS system name was changed.

• The "Snapshot management" option is correctly displayed on the "More" menu of the volumes on the left pane on File Station.

• Apache daemon can successfully start when the Web Server service is enabled.

• Users can upload files that have filenames beginning with "._" to shared folders via SMB.

• Fixed the connection issues that would occur when certain iSCSI HBA initiators (such as HP NC382i and HP 533FLR-T) were used for iSCSI boot.

• The WebUI can now display active directory users who have long Russian user names.

• The IP addresses blocked in the System Connection Logs can be displayed on the block list in "Control Panel" > "System" > "Security" > "Security Level".

• Processes running on Container Station are no longer terminated by a daemon process every 30 seconds.

• Fixed an issue where non-administrator users could not upload files with alternate data streams to the NAS.

• Fixed an issue where the name of guest users who connected to the NAS via Samba would be incorrectly displayed on the "Online Users" list.

• Fixed an issue where users could not upload files that were larger than 3 GB via SMB to an external drive whose file system was FAT32 or EXT3.

• Fixed an issue where the NAS could not wake up from Sleep Mode after users created a port trunking group in the Balance-alb mode.

• Fixed an issue where Storage Manager could not display certain types of external drives when these devices were connected to the NAS via USB 2.0 ports.

• Fixed an issue where users could not create port trunking groups when "Force secure connection (HTTPS) only" was enabled in Control Panel.

[KNOWN ISSUE]

• Due to advancements in the backup features, virtual machines created in older versions (1.x/2.x) of Virtualization Station can no longer be backed up and restored in 3.0. (A workaround is to clone an older Virtual Machine; the cloned VM can be backed up/restored, but all original snapshots will be removed)