Synology DSM

Fixed security vulnerabilities ( Synology-SA-26:06).

Enhanced KMIP certificate handling to comply with updated certificate issuance policies for public certificate authorities (CAs). KMIP client authentication now requires certificates issued by a private CA. Synology default certificates, the QuickConnect certificate, and certificates issued by public CAs (e.g., Let's Encrypt, SSL.com, and Sectigo) are not supported for KMIP client authentication. For detailed configuration instructions, refer to this article. To generate self-signed certificate files for KMIP client authentication, refer to this article. Fixed an issue where a USB UPS could not be recognized after updating to DSM 7.4. Fixed an issue where USB devices could not be used on certain models after updating to DSM 7.4. Improved cache handling to enhance system stability.

Fixed security vulnerabilities ( Synology-SA-26:06).

Fixed security vulnerabilities (Synology-SA-26:06).

When DSM joins an LDAP server, it now displays the supported SMB authentication methods, allowing you to identify whether LDAP users can use NTLM, CIFS plaintext authentication, or Kerberos. Added display for GPU information in Info Center. Enhanced message clarity and error handling in the SSO client. Improved authentication stability when DSM acts as a CAS SSO client. Fixed an issue where signing in to DSM could result in an infinite redirect loop when it was configured as both an SSO Server and client pointing to the same server. Fixed an issue where SAML-authenticated usernames were not shown in Log Center when DSM, acting as a SAML SSO client, could not match them to any local or directory user. Fixed an issue where sign-ins could fail when usernames contain special characters. Fixed an issue where files uploaded via NFS to WriteOnce shared folders might not be locked correctly. Fixed an issue where an extra Kerberos integrity (krb5i) option might be incorrectly displayed in NFS permission security settings. Fixed an issue where IEEE 802.3ad Link Aggregation might fail to be created or function properly at certain network interface speeds after updating to DSM 7.3. Fixed an issue where enabling IPv6 might cause the system to shut down improperly under certain circumstances. Fixed an issue where external network access might still be available after all gateways were deleted. Fixed an issue where licenses might be missing on Virtual DSM after system restart. Fixed an issue where Synology Drive Admin Console might not function properly after installing or updating to DSM 7.3. Fixed an issue where DSM updates might be incorrectly blocked by a false insufficient-space precheck. Fixed an issue where Package Center might not be able to connect to Synology servers in IPv6 network environments. Fixed an issue where system logs could not be attached to support tickets in Support Center. Fixed security vulnerabilities regarding Ghostscript (CVE-2023-43115). Fixed multiple security vulnerabilities.

Fixed a security vulnerability regarding Telnetd (CVE-2026-32746)( Synology-SA-26:03).

Fixed a security vulnerability regarding Telnetd (CVE-2026-32746)( Synology-SA-26:03).

Fixed a security vulnerability regarding Telnetd (CVE-2026-32746)(Synology-SA-26:03).

Fixed multiple security vulnerabilities.

Fixed multiple security vulnerabilities.

Fixed multiple security vulnerabilities.

Fixed a security vulnerability regarding telnetd (CVE-2026-24061).

Fixed a security vulnerability regarding telnetd (CVE-2026-24061).

Fixed a security vulnerability regarding telnetd (CVE-2026-24061).

Fixed an issue where backup files containing encrypted volumes might not function properly when restored to DSM 7.3. Fixed an issue where users might be required to re-enter their license keys after updating to DSM 7.3 when migrating a system or operating in an SHA-enabled environment. Fixed an issue where users could not authenticate using Approve sign-in or FIDO2-compliant hardware security keys before authorization in OAuth Service. Fixed an issue where users might fail to authenticate when configuring SSO clients to use C2 Identity as the identity provider with the SAML protocol. Fixed an issue where DSM might fail to send files from File Station as attachments when accounts were configured through Outlook. Fixed an issue where notification profiles might be incorrect when restoring from configuration backup files. Fixed an issue that prevented certain UPnP renderers from playing MP3 files after updating to DSM 7.3. Fixed a security vulnerability.

Fixed a security vulnerabilities (Synology-SA-25:14).

Fixed an issue where the LED brightness adjustment function might stop working on certain models. Fixed an issue where connected external devices might not appear when selecting files or folders. Fixed an issue where external storage devices might trigger false alerts. Fixed an issue where a UPS connected via USB might fail to function after a system update.

Added an option to postpone important DSM auto-updates for up to 28 days after the first notification. Added support for Synology Tiering and Synology Tiering Vault. Added native exFAT support for external devices, allowing seamless access without additional packages. The exFAT Access package has been discontinued. Added support for backing up and restoring the "Verify server certificate" setting in LDAP directory service. Restoring this setting requires both the export and import systems to run DSM 7.3 or above. Added support for selecting organizational units (OUs) to synchronize when joining a domain. In this version, if you need to modify the OU synchronization list after joining the domain, you must leave and rejoin the domain. Added an option to automatically lock encrypted storage entities during a manual reset (Mode 1). After the reset, the key vault is erased and disabled, and encrypted volumes and shared folders are locked to prevent unauthorized access. This option is set to disabled by default. Added support for sending OTP emergency recovery codes by email if users cannot receive their OTP during 2-factor authentication for OS login. Fixed an issue where DSM configuration backups or Hyper Backup could fail while Shared Folder Sync tasks were running. Fixed an issue where residual snapshots from previous backup tasks might cause entire system backups in Active Backup for Business or Hyper Backup to fail. Fixed an issue where Snapshot Replication tasks might fail due to unexpected errors. Fixed a security vulnerability regarding curl (CVE-2023-38545). Fixed a security vulnerability regarding AppleTalk (CVE-2023-51781). Fixed a security vulnerability regarding krb5 (CVE-2024-37371). Fixed a security vulnerability regarding PostgreSQL (CVE-2025-1094). Fixed multiple security vulnerabilities (CVE-2024-12085, CVE-2020-22218, CVE-2024-24806, and CVE-2023-37920).

Fixed a security vulnerability regarding SDK library (CVE-2025-8024). Fixed multiple security vulnerabilities.

Fixed multiple security vulnerabilities.

Fixed a security vulnerability regarding SDK library (CVE-2025-8024). Fixed multiple security vulnerabilities.

Added support for verifying LDAP server certificates when joining a directory. The following limitations apply: Certificate verification for C2 Identity Edge Server is not supported. This configuration cannot be backed up in DSM system configuration backup or Hyper Backup Entire System Backup. Fixed an issue where the system might display the incorrect status in email notification settings. Fixed an issue where certain packages failed to display after installation. Fixed a security vulnerabilities ( Synology-SA-25:03).

Added support for verifying LDAP server certificates when joining a directory. The following limitations apply: Certificate verification for C2 Identity Edge Server is not supported. This configuration cannot be backed up in DSM system configuration backup or Hyper Backup Entire System Backup. Fixed a security vulnerabilities (Synology-SA-25:03).

Added support for verifying LDAP server certificates when joining a directory. The following limitations apply: Certificate verification for C2 Identity Edge Server is not supported. This configuration cannot be backed up in DSM system configuration backup or Hyper Backup Entire System Backup. Added support for Synology Office Suite APIs, encompassing Synology Drive, Office (Spreadsheet), MailPlus, and Calendar. With RESTful API and Webhook capabilities, you can enable secure integrations and automate workflows. Ensure the following package versions are updated to access these features: Synology Drive Server 3.5.2 Synology MailPlus 3.3.1 Synology Calendar 2.5.3 Fixed a security vulnerabilities ( Synology-SA-25:01). Fixed a security vulnerabilities ( Synology-SA-25:03).

Fixed a security vulnerabilities (Synology-SA-24:20).

To enhance product security, the following packages will require a manual update after this release. Please go to the Package Center and click Repair to install the latest versions: Synology Drive Server 3.5.1-26102 Note: After repairing Synology Drive Server, Synology Office will not auto-enable. Please go to Package Center > Synology Office, and click Run. Replication Service 1.3.0-0423 Minor bug fixes.

Fixed multiple security vulnerabilities ( Synology-SA-24:20). Fixed multiple security vulnerabilities ( Synology-SA-24:02). Fixed multiple security vulnerabilities ( Synology-SA-24:01). Fixed security vulnerabilities regarding netatalk (CVE-2024-38439, CVE-2024-38440, CVE-2024-38441). Fixed a security vulnerability regarding Terrapin Attack (CVE-2023-48795).

Fixed multiple security vulnerabilities (Synology-SA-24:20).

Fixed multiple security vulnerabilities ( Synology-SA-24:20). Fixed multiple security vulnerabilities ( Synology-SA-24:27).

Added support for selecting whether to verify response or assertion signatures for SAML SSO clients. Supports customization of package installation, upgrade, and uninstallation wizards for third-party package developers. Learn more Enhanced protection against deletion of immutable snapshots. Enhanced file system error recoverability. Fixed an issue where backing up WriteOnce shared folders in Hyper Backup might occupy extra space. Enhanced the performance of Thick Provisioned LUNs when the volume is nearly full. Enhanced file search performance when there are a large number of files with the same name. Fixed an issue where restarting the system during an entire system backup could prevent volumes from mounting properly. Fixed an issue where scheduled tasks of emptying recycle bins might fail to delete folders only containing the "desktop.ini" file. Fixed an issue where triggering Adaptive MFA or entering incorrect account credentials might cause the auto block function to count login attempts abnormally. Fixed an issue where users might not be able to set up OTP for login. Fixed an issue where uploading IdP metadata might fail when setting up SAML SSO clients. Fixed an issue where users might not return to DS cam or DS finder after using OIDC SSO login. Fixed an issue where users might not receive emails with emergency codes when using 2FA for DSM login. Fixed an issue where data synchronization might fail when creating backup or replication tasks to a remote target server via Snapshot Replication, Hyper Backup, or other packages. Fixed an issue where login might fail when creating backup or replication tasks to a remote target server via Snapshot Replication, Hyper Backup, or other packages. Fixed an issue where OpenVPN might fail to disable gateways. Fixed an issue where using SAML SSO for DSM login might fail if the IdP's response was too long. Fixed an issue where the system might become unresponsive when setting up OIDC SSO clients. Fixed an issue where Resource Monitor might display abnormal connection times in Connections > Connected Users. Fixed an issue where users might not be able to use a hardware security key for DSM login. Fixed a security vulnerability regarding ghostscript (CVE-2024-29510). Fixed security vulnerabilities regarding netatalk (CVE-2024-38439, CVE-2024-38440, CVE-2024-38441). Fixed a security vulnerability regarding Terrapin Attack (CVE-2023-48795). Fixed a security vulnerability regarding glibc (CVE-2023-4911). Minor bug fixes.

Fixed an issue where upgrading from DSM 7.2.1 to later versions could fail.

Fixed an issue where Cloud Sync and Drive ShareSync couldn't function properly when Active Insight was running on Synology NAS. Fixed multiple security vulnerabilities

Fixed an issue where updating to DSM 7.2.1 nano 2 caused Task Scheduler to be unable to create or edit tasks.

Fixed an issue where certain models might experience abnormal shutdown after updating to DSM 7.2.1. Fixed an issue where files deleted locally might still exist on the Hyper Backup destination server. Fixed an issue where file access failed due to errors during soft link creation in Btrfs file systems. Fixed an issue where backing up WriteOnce shared folders in Hyper Backup might cause space consumption. Fixed an issue where SSD read-write cache might cause unexpected restarts of DSM on SA3200D and SA3400D.

NFS clients can now access information on shared folder quotas. Updated Storage Manager to 1.0.0-0017 to adjust the following: Storage Manager has been modularized into a package to provide better system maintenance and update flexibility. If a firmware update is required for Synology drives, it will be automatically performed during the DSM update. Creating ext4 volumes is no longer supported for rackmount models. For more information, see the release notes for Storage Manager. Supports password setting by new users via links provided in emails. Fixed an issue where Synology Account could not be signed out. Fixed a security vulnerability regarding Ghostscript (CVE-2023-36664). Fixed a security vulnerability regarding Sudo (CVE-2023-22809). Fixed a security vulnerability regarding OpenSSL (CVE-2023-1255). Fixed a security vulnerability regarding Zlib (CVE-2023-37434).

Fixed an issue where errors might occur when NFS clients accessed information on shared folder. Fixed an issue where enabling OVS might affect the performance of 10Gb network interface controllers. Fixed an issue where volumes containing SSD caches might not be mounted properly after updating from DSM 7.0 to DSM 7.2.1.

Fixed an issue where, after DSM 7.2-64570 Update 2, the NVMe SSD caches of a high-availability cluster might stop working. Fixed an issue where Synology Account might not be properly signed out.

Fixed an issue where deleting snapshots through Snapshot Replication on the destination server might cause unused memory to not be released properly. Fixed an issue where certain models might experience unsuccessful replication with Snapshot Replication after updating to DSM 7.2. Fixed an issue where users signing in to DSM through Synology SSO might be unable to open Synology Office files. Fixed an issue where the system might be unable to send test emails when Synology Account is configured to receive notifications. Adjusted the suggestions generated by Western Digital Device Analytics (WDDA). Fixed an issue where certain models might not display the corresponding storage pool after creating a volume. Fixed an issue where the warning for checksum mismatch did not provide the file path for the files containing the error. Fixed a security vulnerability regarding Ghostscript (CVE-2023-36664).

After installing this update, you will not be able to downgrade to a previous DSM version. This update will restart your Synology NAS. Starting from this version, logs for drives will no longer appear in Storage Manager > HDD and will be available only in Log Center. Removed the "Automatically create port forwarding rules" option from QuickConnect advanced settings to increase network security. Users can now create a Btrfs volume of up to 1 PB on specific Synology NAS models. This update automatically converts existing volumes that use the Btrfs (Peta Volume) file system to Btrfs. However, to create a volume larger than 200 TB, a RAID 6 storage pool and at least 64 GB of system memory are still required. Learn more The maximum single volume size supported by RS2423+​/​RS2423RP+ has been adjusted to 200 TB (with a minimum system memory requirement of 32 GB). Starting from this version, only Windows Server 2008 R2 and above versions will be supported. After installing this update, the current Windows Server 2008 domain and earlier versions will be unavailable. Improved the auto-block feature to prevent it from blocking IP addresses in the same subnet as DSM's network interface. Fixed an issue where domain users and groups may experience permission failures after upgrade. Fixed an issue where Btrfs volumes might not be able to run volume optimization successfully. Fixed an issue where drive replacement might not work properly for SHR storage pools. Added support for WriteOnce shared folders on specific models. This feature is based on the Write Once, Read Many (WORM) technology and can be enabled to prevent files from being modified, deleted, or renamed for a specified period. Added support for volume encryption on specific models. All volume encryption keys are stored in the Encryption Key Vault, which can be set up on a local Synology NAS or via KMIP on a remote Synology NAS. Added support for M.2 NVMe SSD storage pools on specific models. Added more Synology NAS models to support the M2D18 adapter card: RS822RP+, RS822+, RS1221RP+, and RS1221+. Added more SSD cache group management options, including changing the RAID type and replacing a drive. Added support for inline zero-block removal on specific models to increase the efficiency of data deduplication. Adjusted how drive information is presented in Storage Manager. Users can now quickly check the condition of their drives by looking at the "Drive Status" field. Users can now view the amount of used and free space for each storage pool and volume in Storage Manager. Added a warning notification for when the available shared folder quota is low. Supports deleting individual desktop notifications. Supports sending DSM notifications via additional webhook providers, including LINE and Microsoft Teams. Supports creating custom notification rules for system events, giving users greater control over what notifications to receive. Supports exporting a list of users and of groups. Added support for SAML to integrate DSM with external SSO servers. Added the option to allow non-admin users to safely eject USB devices. Users can now manually input the IP addresses or FQDNs of one or more domain controllers in the trusted domain. This allows Synology NAS to sync domain data directly with the specified domain controllers. Users can now enable Synology's email server to send DSM notifications directly to their Synology Account. Added support for Auto Block, which restricts SMB login attempts from abnormal IP addresses. Fixed an issue where adding drives to a JBOD storage pool did not expand its capacity. Updated Mbed-TLS to version 2.28.2 to fix multiple security vulnerabilities (CVE-2021-36647, CVE-2022-46392, CVE-2022-46393). Updated Libksba to version 1.6.3 to fix a security vulnerability (CVE-2022-3515). Updated SQLite to version 3.40.0 to fix a security vulnerability (CVE-2022-46908). Updated Certifi to version 2022.12.07 to fix a security vulnerability (CVE-2022-23491). Updated Nod

Fixed an issue where Btrfs volumes might not be able to run volume optimization successfully. Fixed an issue where drive replacement might not work properly for SHR storage pools.

Fixed an issue where, if the space reclamation process had encountered a heavy workload, the file system may be unable to mount after a system restart. Fixed an issue where the system was unable to display an expansion unit's storage pools if the unit had not been properly connected during a restart. Fixed an issue where the S.M.A.R.T. test results of NVMe SSDs could not be displayed.

Updated FFmpeg to version 4.1.9 to fix multiple security vulnerabilities (CVE-2020-20892, CVE-2020-20902, CVE-2020-21688, CVE-2020-21697, CVE-2021-3566, CVE-2021-38114, CVE-2021-38291). Fixed a security vulnerability regarding Netatalk (CVE-2022-45188). Fixed multiple security vulnerabilities regarding Python3 (CVE-2020-10735, CVE-2021-28861, CVE-2022-45061). Fixed multiple security vulnerabilities regarding iproute2 (CVE-2022-3527, CVE-2022-3529, CVE-2022-3530). Fixed multiple security vulnerabilities regarding D-Bus (CVE-2022-42010, CVE-2022-42011, CVE-2022-42012). Fixed a security vulnerability regarding syslog-ng (CVE-2022-38725). Fixed a security vulnerability regarding inetutils (CVE-2022-39028). Fixed a security vulnerability regarding DNSmasq (CVE-2022-0934). Fixed a security vulnerability regarding BusyBox-udhcp (CVE-2019-5747). Fixed multiple security vulnerabilities regarding Linux Kernel (CVE-2021-22600, CVE-2021-38209, CVE-2021-4037, CVE-2022-0168, CVE-2022-1016, CVE-2022-1729, CVE-2022-1786, CVE-2022-20141, CVE-2022-20368, CVE-2022-2078, CVE-2022-2639, CVE-2022-2905, CVE-2022-29581, CVE-2022-32250, CVE-2022-3524, CVE-2022-3566, CVE-2022-3567, CVE-2022-36879, CVE-2022-36946, CVE-2022-42703). Fixed a security vulnerability regarding Nginx (CVE-2022-3638). Fixed a security vulnerability regarding ghostscript (CVE-2023-28879). Fixed a security vulnerability regarding curl (CVE-2023-23916). Fixed an security vulnerability.( Synology-SA-23:07) Fixed an issue where updating to DSM 7.2 might fail if users' Synology NAS weren't connected to the Internet. Fixed an issue where, when the Encryption Key Vault of encrypted volumes was set on a KMIP server, the system would not be able to auto-unlock these volumes after a restart. Fixed an issue where, if Web Station was installed on an encrypted volume, resetting the system would cause the volume to crash. Updated C2 Identity Edge Server to version 1.52.0-0186 to ensure its availability and functionality.