Drive Configuration: 2 x WD red pro 6T (WD6003FFBX-68MU3N0) in RAID 1 , and 1 x WD Blue (SA510 2.5 1000GB ).
I decided to perform reinitializing in order to install “System” on SSD.
In addition I updated the firmware from 4.3.6.2441 to the latest 4.3.6.2805.
Fist of all, I started to get messages : " The system was not shut down properly last time." with “The file system is not clean. It is suggested that you go to [Storage Manager] to run “Check File System”.”
And as the cherry on top, I can’t see my NAS in my TV’s inputs despite that DLNA media server is enabled… so it looks like QNAP removed “Media Streaming add-on”.
I’m afraid to install any updates for QNAPs. They make it worse every time, on the one hand, there is no support anymore for old models, and on the other, they release new firmware with bugs and removes existed apps/pkg …
I know about Twonky, but it doesn’t work properly - no media folders per shared folder and I see all files as a big garbage collection. And Plex to much heavy for TS431… It seems the support is backing me into a corner and practically forcing me to buy the new model… (I can’t…)
Does someone have downloaded “Media Streaming add-on” QPKG for 4.3.6 ?
Hi @IKIFka as I know the old Media Streaming Add-on was taken down due to security issues. I was able to find several installation packages from back then but can not certain which one is specifically for the TS-431. I will sent it by message but you might need to try them one by one to see which works.
Please remember that the reason it was removed was exactly because of those security issues. Please make sure your NAS is only used in a secure internal network if you decide to install it.
Description: An authorization vulnerability in Media Streaming add-on versions 430.1.2.0, 500.1.1.5, and earlier could lead to remote, unauthenticated access.
Affected versions: 430.1.2.0, 500.1.1.5, and earlier.
Resolution: Update to Media Streaming add-on version 500.1.1.6 or later.
The latest ver. for TS-431 is ~430.1.8.13 (MediaStreamingAdd-on_430.1.8.13_arm_ms_20220601.qpkg)
Hi @HanzSung .
In the CVE it is talking about Media Streaming add-on ver. 430.1.2.0 and as a solution it is suggested to use later version.
On my TS-431 (OS 4.3.6.2805- latest) I installed Media Streaming add-on 430.1.8.13.
So I meant whether my installed version (430.1.8.xxx) is good in aspect of security.
In any case my NAS doesn’t have access from global internet.
I am not sure picking a CVE randomly will be informative.
If the app has been removed for security reasons, and there is no CVE or public information about it, I don’t see where it is safe to use it…
Hi! I had to reinstall my qnap, and can’t find MediaStreamingAdd-on_430.1.8.13_arm_ms_20220601.qpkg anywhere. I know the addon has been removed from official downloads due to security issues. Would it be possible for you to send me this file?
Hi @haru0! I can’t thank you enough for the quick response and help! Very much appreciated!!!
I’ve downloaded the package and will try to install it. For the last 2 days what I did, was install version 430.1.8.12 from my previous backup, but I didn’t have it in QPKG format, just the folders and files, so I copied them via SSH. It didn’t work until today, but with some miracle, just before you sent me the file today, I gave it another shot, and I was able to stream files from QFile pro to my TV.
Just for future proofing, in case you also have version 430.1.8.12, would you be able to send that as well?
thanks so much! I’m on 4.3.6.2805 do you happen to have the file for container station and whatever that needs aswell? I had one or two local projects I wanted to use
Hi @Timothyshot please try the Smart URL I sent in the private message.
This model is quite old that not sure if the files will still work normally. If you encounter any problems, please let me know.
sorry not sure how the DM notifications work so I’ll just post this here aswell lol, media streaming add on worked great, container station hit me with this which left me confused because I’m pretty sure the firmware I’m on is enough for what it’s requesting? @haru0