Bash Vulnerability

[farcusnz]

Will Buffalo be releasing patched firmware for Linkstation NAS devices to address the BASH vulnerability (Shellshock)?
Specifically in my case in regards to Linkstation LS-CHL devices.

[tilbert]

Please make available the patched busybox executable.

[farcusnz]

bump

[joma90]

So in honest opinion. I hope they do but i all honesty, if you unit isnt on the site. It will probably not get the release for it. Buffalo and like most other companies will only software releases and updates if its not EOL, (end of life), LS-CHL was EOL long time ago. Though Buffalo is one of the few companies what will get you techsupport still for eol, or out of warranty. Releasing a fix for it will be a long shot.
if its a V2 you can use the downloads from the ls-wvl (linkstation Pro).

This is just something i have notice over the years of talking with companies.

[farcusnz]

Buffalo (Europe) have released a firmware update (ver 1.69) for the following Linkstation devices

LS-XHL,LS-CHL,LS-WXL,LS-WSXL,LS-SL,LS-AVL,LS-VL,LS-
WVL,LS-QVL,LS-XL,LS-YL,LS-WXBL

to address

- Modified to deal with vulnerabilities of Bash programming which allows
remote attackers to execute arbitrary commands (CVE-2014-6271 and CVE-
2014-7169).

So I guess anyone that runs one of these devices should probably download from Buffalo Europe and install.
Interesting that Buffalo North America haven't seen fit to update.

edit: as fas as LS-CHL is concerned the update is only available for LS-CHLv2

[ClodeRunner]

Hello,

Just upgraded without any issue on MacOS Yosemite.

[farcusnz]

should probably point out that the firmware is available on the North American website - it just isn't listed as being available for LS-CHL devices (except in the readme)

Windows
http://www.buffalotech.com/support-and-downloads/download/ls_series-169.zip

Mac
http://www.buffalotech.com/support-and-downloads/download/ls_series-169_fwmac.dmg

Readme / Changelog
http://www.buffalotech.com/support-and-downloads/download/ls_series-169_readme_en.txt