[GH-ISSUE #59] Security Advisory on Media Server #23

Closed
opened 2026-03-12 18:59:47 +03:00 by kerem · 11 comments
Owner

Originally created by @Toregev on GitHub (Feb 4, 2025).
Original GitHub issue: https://github.com/007revad/Video_Station_for_DSM_722/issues/59

I saw an update for DSM 7.2.2 came out (update 3) which had a vulnerability fix included. When I clicked on the link to get more information about the fixed vulnerability I was taken to the "Synology Product Security Advisory" page, where I noticed there was a very recent advisory for the Media Server app. Does the script need to be updated to take this into account, or is it something to not be too worried about?

This is the link to the advisory:
https://www.synology.com/en-uk/security/advisory/Synology_SA_24_28

Many thanks for the script, it saved my sanity when you first released it.

Originally created by @Toregev on GitHub (Feb 4, 2025). Original GitHub issue: https://github.com/007revad/Video_Station_for_DSM_722/issues/59 I saw an update for DSM 7.2.2 came out (update 3) which had a vulnerability fix included. When I clicked on the link to get more information about the fixed vulnerability I was taken to the "Synology Product Security Advisory" page, where I noticed there was a very recent advisory for the Media Server app. Does the script need to be updated to take this into account, or is it something to not be too worried about? This is the link to the advisory: https://www.synology.com/en-uk/security/advisory/Synology_SA_24_28 Many thanks for the script, it saved my sanity when you first released it.
kerem closed this issue 2026-03-12 18:59:52 +03:00
Author
Owner

@007revad commented on GitHub (Feb 4, 2025):

That Security Advisory says:

  • Media Server for DSM 7.2 | Important | Upgrade to 2.2.0-3325 or above.
  • Media Server for DSM 7.1 | Important | Upgrade to 2.0.5-3152 or above.

The INFO file inside the Media Server 2.0.5-3152 package says it can install on DSM 7.0 and later.

I'll try Media Server 2.0.5-3152 in DFSM 7.2.2 and make sure it works before changing the script to install that version instead of 2.1.0-3304 (which is 11 months older than 2.0.5-3152).

<!-- gh-comment-id:2633473038 --> @007revad commented on GitHub (Feb 4, 2025): That Security Advisory says: - Media Server for DSM 7.2 | Important | Upgrade to 2.2.0-3325 or above. - Media Server for DSM 7.1 | Important | Upgrade to 2.0.5-3152 or above. The INFO file inside the Media Server 2.0.5-3152 package says it can install on DSM 7.0 and later. I'll try Media Server 2.0.5-3152 in DFSM 7.2.2 and make sure it works before changing the script to install that version instead of 2.1.0-3304 (which is 11 months older than 2.0.5-3152).
Author
Owner

@Toregev commented on GitHub (Feb 4, 2025):

Thank you for the quick reply! Hopefully 2.0.5-3152 works, thank you for attempting this.

<!-- gh-comment-id:2633519659 --> @Toregev commented on GitHub (Feb 4, 2025): Thank you for the quick reply! Hopefully 2.0.5-3152 works, thank you for attempting this.
Author
Owner

@007revad commented on GitHub (Feb 4, 2025):

2.0.5-3152 works!

I'll update the script tomorrow. It's 10pm here.

<!-- gh-comment-id:2633604636 --> @007revad commented on GitHub (Feb 4, 2025): 2.0.5-3152 works! I'll update the script tomorrow. It's 10pm here.
Author
Owner

@Toregev commented on GitHub (Feb 4, 2025):

Awesome! Thank you very much for the hard work! Will the version of media server currently installed on my Synology need to be uninstalled first, or do you think this one could be installed on top of the current one? Just so I know to copy down my settings somewhere.

<!-- gh-comment-id:2634479650 --> @Toregev commented on GitHub (Feb 4, 2025): Awesome! Thank you very much for the hard work! Will the version of media server currently installed on my Synology need to be uninstalled first, or do you think this one could be installed on top of the current one? Just so I know to copy down my settings somewhere.
Author
Owner

@007revad commented on GitHub (Feb 4, 2025):

All done
https://github.com/007revad/Video_Station_for_DSM_722/releases/tag/v3.1.16

If the installed media server version is not the correct version the script automatically uninstalls media server (but keeps your settings) then installs 2.0.5-3152

<!-- gh-comment-id:2634720810 --> @007revad commented on GitHub (Feb 4, 2025): All done https://github.com/007revad/Video_Station_for_DSM_722/releases/tag/v3.1.16 If the installed media server version is not the correct version the script automatically uninstalls media server (but keeps your settings) then installs 2.0.5-3152
Author
Owner

@Toregev commented on GitHub (Feb 4, 2025):

Thank you for the update. I tried to run the new script as a scheduled task and got this output:

Task: Install VideoStation
Start time: Tue, 04 Feb 2025 19:32:11 +0000
Stop time: Tue, 04 Feb 2025 19:32:12 +0000
Current status: 0 (Normal)
Standard output/error:
Video_Station_for_DSM_722 v1.3.16
DS220+ DSM 7.2.2-72806-3
CPU geminilake x86_64
Running from: /volume1/backup/videostation_for_722.sh

[0;36mThere is a newer version of this script available. [0m
Current version: v1.3.16
Latest version: v3.1.16
[0;36mDo you want to download v3.1.16 now? [0m [y/n]
Using CPU type: x86_64

  1. Install All 3) Skip Video Station
  2. Only Advanced Media Codecs 4) Skip Media Server
    Select package(s) to install:
    No selection made. Installing all packages.

[0;36mAdvanced Media Extensions [0m 30.1.0-3005 already installed

[0;36mVideo Station [0m 30.1.0-3153 already installed

[0;36mMedia Server [0m already installed

Finished :)

To enable HEVC decoding:

  1. Open Package Center > Installed
  2. Click Advanced Media Extensions
  3. Click on Open
  4. Click on Install then OK

Media Server version is still listed as 20.1.0-3304 in Package Centre, so I think something didn't work correctly. My guess is the naming of the script as on Github it says 3.1.16, but inside the script it says 1.3.16?

<!-- gh-comment-id:2634895573 --> @Toregev commented on GitHub (Feb 4, 2025): Thank you for the update. I tried to run the new script as a scheduled task and got this output: Task: Install VideoStation Start time: Tue, 04 Feb 2025 19:32:11 +0000 Stop time: Tue, 04 Feb 2025 19:32:12 +0000 Current status: 0 (Normal) Standard output/error: Video_Station_for_DSM_722 v1.3.16 DS220+ DSM 7.2.2-72806-3 CPU geminilake x86_64 Running from: /volume1/backup/videostation_for_722.sh [0;36mThere is a newer version of this script available. [0m Current version: v1.3.16 Latest version: v3.1.16 [0;36mDo you want to download v3.1.16 now? [0m [y/n] Using CPU type: x86_64 1) Install All 3) Skip Video Station 2) Only Advanced Media Codecs 4) Skip Media Server Select package(s) to install: No selection made. Installing all packages. [0;36mAdvanced Media Extensions [0m 30.1.0-3005 already installed [0;36mVideo Station [0m 30.1.0-3153 already installed [0;36mMedia Server [0m already installed Finished :) To enable HEVC decoding: 1. Open Package Center > Installed 2. Click Advanced Media Extensions 3. Click on Open 4. Click on Install then OK Media Server version is still listed as 20.1.0-3304 in Package Centre, so I think something didn't work correctly. My guess is the naming of the script as on Github it says 3.1.16, but inside the script it says 1.3.16?
Author
Owner

@Toregev commented on GitHub (Feb 4, 2025):

I think I may have found something in the script. In this section:

Get installed MediaServer version

if ; then
ms_version=$(/usr/syno/bin/synopkg version MediaServer)
if check_pkg_installed MediaServer && ; then
# Uninstall MediaServer (wrong version)
echo ""
package_uninstall MediaServer "Media Server"
fi
fi

As the installed version starts with 20 does this cause the issue?

<!-- gh-comment-id:2634924321 --> @Toregev commented on GitHub (Feb 4, 2025): I think I may have found something in the script. In this section: # Get installed MediaServer version if [[ $no_ms != "yes" ]]; then ms_version=$(/usr/syno/bin/synopkg version MediaServer) if check_pkg_installed MediaServer && [[ ${ms_version:0:2} != "20" ]]; then # Uninstall MediaServer (wrong version) echo "" package_uninstall MediaServer "Media Server" fi fi As the installed version starts with 20 does this cause the issue?
Author
Owner

@Toregev commented on GitHub (Feb 4, 2025):

I added "$ms_version" to line 616 in the script as it appeared to be missing and got this output from the script

Task Scheduler has completed a scheduled task.

Task: Install VideoStation
Start time: Tue, 04 Feb 2025 20:02:53 +0000
Stop time: Tue, 04 Feb 2025 20:02:55 +0000
Current status: 0 (Normal)
Standard output/error:
Video_Station_for_DSM_722 v1.3.16
DS220+ DSM 7.2.2-72806-3
CPU geminilake x86_64
Running from: /volume1/backup/videostation_for_722.sh
Using CPU type: x86_64

  1. Install All 3) Skip Video Station
  2. Only Advanced Media Codecs 4) Skip Media Server
    Select package(s) to install:
    No selection made. Installing all packages.

[0;36mAdvanced Media Extensions [0m 30.1.0-3005 already installed

[0;36mVideo Station [0m 30.1.0-3153 already installed

[0;36mMedia Server [0m 20.1.0-3304 already installed

Finished :)

To enable HEVC decoding:

  1. Open Package Center > Installed
  2. Click Advanced Media Extensions
  3. Click on Open
  4. Click on Install then OK
<!-- gh-comment-id:2634948192 --> @Toregev commented on GitHub (Feb 4, 2025): I added "$ms_version" to line 616 in the script as it appeared to be missing and got this output from the script Task Scheduler has completed a scheduled task. Task: Install VideoStation Start time: Tue, 04 Feb 2025 20:02:53 +0000 Stop time: Tue, 04 Feb 2025 20:02:55 +0000 Current status: 0 (Normal) Standard output/error: Video_Station_for_DSM_722 v1.3.16 DS220+ DSM 7.2.2-72806-3 CPU geminilake x86_64 Running from: /volume1/backup/videostation_for_722.sh Using CPU type: x86_64 1) Install All 3) Skip Video Station 2) Only Advanced Media Codecs 4) Skip Media Server Select package(s) to install: No selection made. Installing all packages. [0;36mAdvanced Media Extensions [0m 30.1.0-3005 already installed [0;36mVideo Station [0m 30.1.0-3153 already installed [0;36mMedia Server [0m 20.1.0-3304 already installed Finished :) To enable HEVC decoding: 1. Open Package Center > Installed 2. Click Advanced Media Extensions 3. Click on Open 4. Click on Install then OK
Author
Owner

@Toregev commented on GitHub (Feb 4, 2025):

I got it to work by changing this line:

if check_pkg_installed MediaServer && ; then

to

if check_pkg_installed MediaServer && ; then

Task Scheduler has completed a scheduled task.

Task: Install VideoStation
Start time: Tue, 04 Feb 2025 20:11:02 +0000
Stop time: Tue, 04 Feb 2025 20:11:17 +0000
Current status: 0 (Normal)
Standard output/error:
Video_Station_for_DSM_722 v1.3.16
DS220+ DSM 7.2.2-72806-3
CPU geminilake x86_64
Running from: /volume1/backup/videostation_for_722.sh
Using CPU type: x86_64

  1. Install All 3) Skip Video Station
  2. Only Advanced Media Codecs 4) Skip Media Server
    Select package(s) to install:
    No selection made. Installing all packages.

Uninstalling [0;36mMedia Server [0m. Uninstalling [0;36mMedia Server [0m.. Uninstalling [0;36mMedia Server [0m... Uninstalling [0;36mMedia Server [0m.... Uninstalling [0;36mMedia Server [0m..... Uninstalling [0;36mMedia Server [0m...... Uninstalling [0;36mMedia Server [0m....... Uninstalling [0;36mMedia Server [0m........ Uninstalling [0;36mMedia Server [0m......... Uninstalling [0;36mMedia Server [0m..........Uninstalling [0;36mMedia Server [0m

[0;36mAdvanced Media Extensions [0m 30.1.0-3005 already installed

[0;36mVideo Station [0m 30.1.0-3153 already installed

Downloading [0;36mMediaServer-x86_64-2.0.5-3152.spk [0m
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 42 9574k 42 4061k 0 0 5281k 0 0:00:01 --:--:-- 0:00:01 5281k100 9574k 100 9574k 0 0 6930k 0 0:00:01 0:00:01 --:--:-- 6933k

Installing [0;36mMedia Server [0m. Installing [0;36mMedia Server [0m.. Installing [0;36mMedia Server [0m... Installing [0;36mMedia Server [0m.... Installing [0;36mMedia Server [0m..... Installing [0;36mMedia Server [0m...... Installing [0;36mMedia Server [0m....... Installing [0;36mMedia Server [0m........ Installing [0;36mMedia Server [0m......... Installing [0;36mMedia Server [0m.......... Installing [0;36mMedia Server [0m Installing [0;36mMedia Server [0m. Installing [0;36mMedia Server [0m.. Installing [0;36mMedia Server [0m... Installing [0;36mMedia Server [0m.... Installing [0;36mMedia Server [0m..... Installing [0;36mMedia Server [0m...... Installing [0;36mMedia Server [0m....... Installing [0;36mMedia Server [0m........Installing [0;36mMedia Server [0m
Stopping Media Server.Stopping Media Server
Preventing Media Server from auto updating
Starting Media Server. Starting Media Server.. Starting Media Server... Starting Media Server.... Starting Media Server..... Starting Media Server...... Starting Media Server....... Starting Media Server........ Starting Media Server......... Starting Media Server..........Starting Media Server

Finished :)

To enable HEVC decoding:

  1. Open Package Center > Installed
  2. Click Advanced Media Extensions
  3. Click on Open
  4. Click on Install then OK
<!-- gh-comment-id:2634963197 --> @Toregev commented on GitHub (Feb 4, 2025): I got it to work by changing this line: if check_pkg_installed MediaServer && [[ ${ms_version:0:2} != "20" ]]; then to if check_pkg_installed MediaServer && [[ ${ms_version:0:2} != "20.0.5-3152" ]]; then Task Scheduler has completed a scheduled task. Task: Install VideoStation Start time: Tue, 04 Feb 2025 20:11:02 +0000 Stop time: Tue, 04 Feb 2025 20:11:17 +0000 Current status: 0 (Normal) Standard output/error: Video_Station_for_DSM_722 v1.3.16 DS220+ DSM 7.2.2-72806-3 CPU geminilake x86_64 Running from: /volume1/backup/videostation_for_722.sh Using CPU type: x86_64 1) Install All 3) Skip Video Station 2) Only Advanced Media Codecs 4) Skip Media Server Select package(s) to install: No selection made. Installing all packages. Uninstalling [0;36mMedia Server [0m. Uninstalling [0;36mMedia Server [0m.. Uninstalling [0;36mMedia Server [0m... Uninstalling [0;36mMedia Server [0m.... Uninstalling [0;36mMedia Server [0m..... Uninstalling [0;36mMedia Server [0m...... Uninstalling [0;36mMedia Server [0m....... Uninstalling [0;36mMedia Server [0m........ Uninstalling [0;36mMedia Server [0m......... Uninstalling [0;36mMedia Server [0m..........Uninstalling [0;36mMedia Server [0m [0;36mAdvanced Media Extensions [0m 30.1.0-3005 already installed [0;36mVideo Station [0m 30.1.0-3153 already installed Downloading [0;36mMediaServer-x86_64-2.0.5-3152.spk [0m % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 42 9574k 42 4061k 0 0 5281k 0 0:00:01 --:--:-- 0:00:01 5281k100 9574k 100 9574k 0 0 6930k 0 0:00:01 0:00:01 --:--:-- 6933k Installing [0;36mMedia Server [0m. Installing [0;36mMedia Server [0m.. Installing [0;36mMedia Server [0m... Installing [0;36mMedia Server [0m.... Installing [0;36mMedia Server [0m..... Installing [0;36mMedia Server [0m...... Installing [0;36mMedia Server [0m....... Installing [0;36mMedia Server [0m........ Installing [0;36mMedia Server [0m......... Installing [0;36mMedia Server [0m.......... Installing [0;36mMedia Server [0m Installing [0;36mMedia Server [0m. Installing [0;36mMedia Server [0m.. Installing [0;36mMedia Server [0m... Installing [0;36mMedia Server [0m.... Installing [0;36mMedia Server [0m..... Installing [0;36mMedia Server [0m...... Installing [0;36mMedia Server [0m....... Installing [0;36mMedia Server [0m........Installing [0;36mMedia Server [0m Stopping Media Server.Stopping Media Server Preventing Media Server from auto updating Starting Media Server. Starting Media Server.. Starting Media Server... Starting Media Server.... Starting Media Server..... Starting Media Server...... Starting Media Server....... Starting Media Server........ Starting Media Server......... Starting Media Server..........Starting Media Server Finished :) To enable HEVC decoding: 1. Open Package Center > Installed 2. Click Advanced Media Extensions 3. Click on Open 4. Click on Install then OK
Author
Owner

@007revad commented on GitHub (Feb 4, 2025):

LOL

I've just made the exact same changes in v1.3.17
https://github.com/007revad/Video_Station_for_DSM_722/releases

<!-- gh-comment-id:2634966296 --> @007revad commented on GitHub (Feb 4, 2025): LOL I've just made the exact same changes in v1.3.17 https://github.com/007revad/Video_Station_for_DSM_722/releases
Author
Owner

@Toregev commented on GitHub (Feb 4, 2025):

Thank you very much for the updates, glad it's all up to date now. My settings did end up being reset, so just have to sort those out now. Thank you again!

<!-- gh-comment-id:2634972668 --> @Toregev commented on GitHub (Feb 4, 2025): Thank you very much for the updates, glad it's all up to date now. My settings did end up being reset, so just have to sort those out now. Thank you again!
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/Video_Station_for_DSM_722#23
No description provided.