WD is happy to announce the release of My Cloud Firmware 04.05.00-334 for manual download at https://support.wdc.com/downloads.aspx?g=904&lang=en#firmware) for the following My Cloud products.
My Cloud (single bay with 04.xx.xx-xxx firmware code line)
04.05.00-334 Release Notes
- Security Fixes
- Resolved security vulnerability (CVE-2018-1160) - Netatalk Arbitrary Code Execution Vulnerability.
- Resolved Samba security vulnerability (CVE-2017-7494).
- Resolved multiple command injection vulnerabilities including CVE-2016-10108 and CVE 201610107.
- Resolved multiple cross site request forgery (CSRF) vulnerabilities.
- Improved the security of volume mount options.
- Components Updated
- Apache - v2.4.10
- OpenSSL - v1.0.1t
- libupnp - v1.6.25 (CVE-2012-5958)
- Other Bug Fixes
- Improved remote host port handling.
- Resolved USB drive unlocking mechanism.