NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
Any plans for Samba fix for CVE-2017-7494 ?
I posted elsewhere about this, but CVE-2017-7494 NEEDs to be patched on any device still in operation, and I think that includes the older, technically out of support models that I have 6 of. Wit...
Legacy Sparc, x86 and ARM firmware is now available:
RAIDiator-4.1.16 (Sparc)
Hi PHolder,
A firmware upgrade with this patched is already released, 6.7.3:
https://kb.netgear.com/000038777/ReadyNAS-OS-6-Software-Version-6-7-3
We've built firmware with the patch for CVE-2017-7494 for legacy models as well. Once they have undergone QA testing, I believe we plan to release those updates as well:
RAIDiator-4.1.16
RAIDiator-arm-5.3.13
RAIDiator-x86-4.2.31
As for SMB2 and SMB3, we're not updating to a newer samba series on the legacy models at this time so SMB2 support would remain experimental and remain disabled. The new firmware has the same samba version except with the patch so the netgearx at the end (where x is a number) would be incremented by one to reflect the change.
mdgm wrote:As for SMB2 and SMB3, we're not updating to a newer samba series on the legacy models at this time so SMB2 support would remain experimental and remain disabled. The new firmware has the same samba version except with the patch so the netgearx at the end (where x is a number) would be incremented by one to reflect the change.
I'm going to keep beating this dead horse until it upgrades to SMB2:
SMB1 was pretty much already marked as deprecated when ReadyNAS was shipping the NV series as new devices... and in a couple of months people who have one still working will find new installs of Windows won't be able to even access it... It seems like the better customer service story would be a recompile and test cycle that adds the necessary SMB 2 (or even SMB 3) support since we already know it works well in Netgear's other products.
PHolder wrote:
It seems like the better customer service story would be a recompile ...It would be a lot more work than that. They'd need to back-port to the much older linux kernel. Memory is another potential obstace (only 256 MB in the v1).
Of course we'd all love it if they did it.
Don't forget running all the tests to make sure the fix doesn't break anything. Testing is the most important aspect of supporting older systems, especially in memory constrained systems.
We've built firmware with the patch for CVE-2017-7494 for legacy models as well. Once they have undergone QA testing, I believe we plan to release those updates as well
Do you have an ETA?
As for SMB2 and SMB3, we're not updating to a newer samba series on the legacy models at this time so SMB2 support would remain experimental and remain disabled. The new firmware has the same samba version except with the patch so the netgearx at the end (where x is a number) would be incremented by one to reflect the change.
Does it mean that on my Readynas NV+v2 there is a buried disabled SMB2 I can enable by myself in some way via Putty? Can you point me to some helpful resource to do it? Side effects? Thank you
Does this effectively render the NV+ / Duo obsolete if CIFS ( SMB) is required?
NFS & AFP are both not an option for me.
Spooled wrote:Does this effectively render the NV+ / Duo obsolete if CIFS ( SMB) is required?
NFS & AFP are both not an option for me.
I would argue, that yes, the lack of bringing these devices up to SMB2 or better effectively makes them obsolete. I have disabled SMB1 on all my Windows devices, as MS has recommended, and therefore they can no longer communicate with 5 of my 6 ReadyNAS devices, because only one of them is modern enough to be able to run OS 6. Those same devices also cannot support drives larger than 2TB and, to me, that also leaves them being obsoleted. Your mileage will vary, but my decision on these matters was to go with a different vendor for my NAS needs, where I have a 12 bay unit that gets weekly [security] updates and is able to run SMB 3.
I've done a little research about trying to get an alternate OS into the legacy NASes, but that currently doesn't seem very possible. I really wish, if Netgear no longer wishes to support these devices, they would open source the necessary components so that the FOSS community could take over and provide support.
Legacy Sparc, x86 and ARM firmware is now available:
RAIDiator-4.1.16 (Sparc)
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
