New Release - My Cloud Firmware Versions 2.31.183 (05/20/2019)

#1

WD is happy to announce the release of My Cloud Firmware 2.31.183 for manual download and limited auto-update (phased rollout) on 05/20 at https://support.wdc.com for the following My Cloud products.

  • My Cloud
  • My Cloud Mirror Gen2
  • My Cloud EX2 Ultra
  • My Cloud EX2100
  • My Cloud EX4100
  • My Cloud DL2100
  • My Cloud DL4100
  • My Cloud PR2100
  • My Cloud PR4100

What’s new!

Security Fixes

  • Apache updated to version 2.4.38 (CVE-2019-0211).
  • Webfile viewer disabled for non-admin users (CVE-2019-9949).
  • Removed remember-me mechanism from login page.
  • Resolved authenticated arbitrary file operation and authenticated command injection vulnerabilities.
  • Added protection against file path traversal.
  • Resolved authentication bypass vulnerability.
  • Mitigation added for user session hijacking.
  • Added protection against cookie modification vulnerabilities.

Other Bug Fixes

  • Resolved storage key upload error

Notable KBA:

Please reference this KBA Answer ID 25490 My Cloud Firmware Up To Date but Newer Version Available for Download

Wonder what spooked WD with releasing update v2.31.174 on the 26th?
PR4100 Firmware Version 2.31.183
Problem after manual update 2.31.163
pinned globally #2
unpinned #3
closed #4
opened #5
New Release - My Cloud Firmware Versions 2.31.183 (05/20/2019)
closed #6