QNAP Releases Turbo NAS Update To Fix Heartbleed OpenSSL Bug

By Nathan Kirsch April 18, 2014

QNAP Releases System Updates to Fix Heartbleed OpenSSL Vulnerability

QNAP_logo

Taipei, Taiwan, April 18, 2014 QNAP Systems Inc. today announced firmware updates for Turbo NAS systems with vulnerability to the OpenSSL Heartbleed bug (CVE-2014-0160). The operating systems vulnerable to Heartbleed are QTS versions 4.0 and 4.1. Versions 3.8 and earlier use a different version of OpenSSL and are not affected by the OpenSSL Heartbleed bug.

As described on the Common Vulnerabilities and Exposures website, the OpenSSL 1.0.1 TLS and DTLS implementation, before 1.0.1g, does not properly process Heartbeat Extension packets which allow remote attackers to obtain sensitive information by reading private keys (aka the Heartbleed bug).

We strongly urge users of vulnerable Turbo NAS systems to update their firmware, said Jason Hsu, Product Manager of QNAP. Users are also recommended to contact their SSL providers to regenerate their SSL CSR/keys for server protection.

To obtain the system updates (QTS 4.0.7 and QTS 4.1.0 RC2) with recompiled OpenSSL, please download from http://www.qnap.com/i/en/product_x_down/ or have your Turbo NAS perform a live update via the QTS control panel.

For more information, please contact us at http://helpdesk.qnap.com/

About QNAP

QNAP Systems, Inc., as its brand promise “Quality Network Appliance Provider”, aims to deliver comprehensive offerings of cutting edge network attached storage (NAS) and network video recorder (NVR) solutions featured with ease-of-use, robust operation, large storage capacity, and trustworthy reliability. QNAP integrates technologies and designs to bring forth quality products that effectively improve business efficiency on file sharing, virtualization applications, storage management and surveillance in the business environments, as well as enrich entertainment life for home users with the offering of a fun multimedia center experience. Headquartered in Taipei, QNAP delivers its solutions to the global market with nonstop innovation and passion.