Zum Hauptinhalt springen

Version 7.3.5 2026-11-10

This maintenance release updates several base packages to address CVEs, updates the Linux kernel to 6.18.60-Unraid, and adds support for the British Columbia timezone. We recommend upgrading to receive these security updates.

Upgrading​

For step-by-step instructions, see Updating Unraid. Questions about your license? Review the License FAQ.

Known issues​

No new release-specific known issues are listed. See the Unraid OS 7.3.4 release notes for the previous release's known issues.

Rolling back​

No release-specific rollback limitations are listed.

Changes vs. Unraid OS 7.3.4​

WebGUI / System​

  • New: Added support for the British Columbia timezone.

Unraid API​

  • Security: Protected GraphQL operations enforce authorization.
  • Security: Unraid API GraphQL requests now have request-size and query-complexity limits. Schema metadata requests are blocked when Developer Sandbox is disabled.
  • Security: Stored OIDC client secrets are no longer returned in API settings or provider responses; configured secrets are preserved when an update omits them.
  • Fix: Repeated OIDC authorization requests and callbacks are bounded.

Clients that rely on schema introspection in that mode or exceed the limits may need to be adjusted.

Linux kernel​

  • Linux kernel: update to 6.18.60-Unraid.

Base distro updates​

Updated packages (16)​

  • bind: version 9.20.29 -> 9.20.30 (CVE-2026-19630, CVE-2026-94300, CVE-2026-96888, CVE-2026-97313)
  • brotli: version 1.2.0-2 -> 1.2.1 (CVE-2026-111497)
  • btrfs-progs: version 7.1-2 -> 7.3
  • coreutils: version 9.12-2 -> 9.12-3
  • dynamix.unraid.net: version 4.37.5-2 -> 4.37.11-2
  • harfbuzz: version 14.6.0 -> 15.0.0
  • iproute2: version 7.2.0-2 -> 7.3.0
  • lmdb: version 1.0.2 -> 1.0.3
  • nano: version 9.2-2 -> 9.3
  • nfs-utils: version 3.1.1-3 -> 3.1.1-4
  • patch: version 2.8-2 -> 2.8.1 (CVE-2026-115207)
  • sysvinit-scripts: version 16.0-8 -> 16.0-10
  • usbutils: version 019-2 -> 020
  • util-linux: version 2.42.4 -> 2.42.4-4 (CVE-2026-78408)
  • xkeyboard-config: version 2.48-2 -> 2.49
  • zfs: version 2.4.4_6.18.58_Unraid-1_LT -> 2.4.4_6.18.60_Unraid-1_LT