Page 1 of 1

AFP Version Vunerable

Posted: 20 Mar 2023, 22:59
by StephenM
I have ARM TNAS running 4.2.41

The installed AFPD/Netatalk is vulnerable as it is only at version 3.1.12

https://www.bleepingcomputer.com/news/s ... ical-bugs/

When will this be updated for ARM?

This vulnerability has been known about and a fix released by Netatalk for OVER A YEAR NOW.

Very poor! You should be ashamed of your lack of response to this vulnerability TerraMaster.

Re: AFP Version Vunerable

Posted: 21 Mar 2023, 00:08
by crisisacting
AFP was deprecated by Apple on newer MacOS versions (10.9 and newer), so this should just be removed altogether, since it's vulnerable & even Apple wants users to move away from it.

Re: AFP Version Vunerable

Posted: 23 Mar 2023, 21:39
by StephenM
Unless there is a reliable solution to using SMB drives for Time Machine Backup that doesn't require me to re-partition my RAID array so that I can prevent the backups filling up my whole array then I'll be using AFP.

Besides the x86 TOS 5 version does have the 3.1.13 AFP version which has the security vulnerabilities resolved.

Why can't us ARM users get a fix as well.

Re: AFP Version Vunerable

Posted: 23 Mar 2023, 21:45
by powerQ
afp is an abandoned file service, I have disabled it.