Several bugs found on hacking contest Pwn2Own

[EAZ1964]

One of them in the photo app:

RISK:STATION

A zero-day vulnerability in the Synology® DiskStation and BeeStation product line, known as CVE-2024-10443, granting remote code execution as root.

www.midnightblue.nl

Watch your updates..

 

[wrldtvlr]

Bleeping Computer says Synology has released a patch but they aren't pushing it out automatically and it's not in the Download Center. Anyone know where it is?

 

[SynoMan]

Mine got an update on DS418play already a few days ago:

 

[wrldtvlr]

Ahhhh. Misread the installed version number. I do have 795.