SRM Update Version: 1.3.1-9346 Update 3

[SynoMan]

(2022-12-22)
Important Note

The update will be available for selected regions within the following weeks, although the release time in each region may vary slightly.

Fixed Issues

1. Fixed multiple security vulnerabilities. (Synology-SA-22:23, Synology-SA-22:25)

Notes:

• This version is released in a staged rollout.

Source: Release Notes for SRM | Synology Inc.

 

[fredbert]

I can’t reconcile the Synology security alert’s severity rating of Critical with the rollout…

The update will be available for selected regions within the following weeks, although the release time in each region may vary slightly

I’ve manually downloaded the patch files and updated my routers this morning.

Os​

SRM ✎ : 1.3.1-9346-3 ⇩ ✱

 

[SynoMan]

I agree, I do not understand that at all.

 

[zombiephysicist]

How did you download it. When I go to the site it just shows 1.3.1 (although the notes indicate it's update 3). When I download it and try to manually update it, it says cannot update because the update needs to be later version than currently installed (update 2).

Where/how did you get the update 3 version.

Thanks!

 

[Jan Janowski]

I see it, in all downloads, but internet has been down here for half the homes in our subdivision for two days now, and no timeframe for repair.
So router at present doesn’t have to worry about the vulnerability right now!
(With no internet)
2AM day 3! I guess someone restarted the server feeding me! Router -3 Update done!

 

[fredbert]

How did you download

SRM ✎ : 1.3.1-9346-3 ⇩ ✱

 

[leriak]

I can’t reconcile the Synology security alert’s severity rating of Critical with the rollout…

My guess is that synology has no evidence that those secutity vulnerabilities are actively in use by the baddies, otherwise I'd like to think that they would push the fixes immediately.

 

[Jan Janowski]

Didn’t they push the DSM version of this update immediately? That’s why I did the SRM Version update as soon as Zito fixed the internet. From memory it appears that Ram & CPU Use increased 1-3% Second 2600 update to -3 indicates a slight increase....in CPU

 

[leriak]

Didn’t they push the DSM version of this update immediately?

The release notes says that it's a "staged rollout".

EDIT:
ooh, you are refering to DSM, not SRM, my bad... I don't know about that

 

[fredbert]

late to reply, but yes the DSM patches following the same hacking event got pushed very quickly. There were also vulnerabilities raised in SRM and now we get a phased rollout. If you wait to update for these critical patches.

 

[DaClown]

Updated. So far, so good.