Skip to main content

Version 7.3.4 2026-10-22

Unraid OS 7.3.4 includes WebGUI security fixes, updates the Linux kernel to 6.18.58, and fixes Docker icon handling and File Manager operations. This release also includes an updated PHP 8.4.27 release, which addresses multiple reported PHP vulnerabilities.

All users are encouraged to update.

Upgrading​

For step-by-step instructions, see Updating Unraid. Questions about your license? Review the License FAQ.

Known issues​

  • This release includes versions of BIND, jq, libarchive, libssh, nginx, PHP, QEMU, and Samba identified as affected by security advisories. Remediation for these packages is targeted for Unraid OS 7.3.5.

Rolling back​

  • No release-specific rollback warnings are noted.

Base distro updates​

Updated packages (44)​

  • aaa_base: version 16.0 -> 16.0-3
  • at-spi2-core: version 2.62.0.1-2 -> 2.62.1
  • ca-certificates: version 20260910 -> 20261020
  • cairo: version 1.18.4-2 -> 1.18.6
  • cifs-utils: version 7.8 -> 7.9
  • cryptsetup: version 2.8.8 -> 2.8.8-2
  • curl: version 8.22.0 -> 8.23.0 (CVE-2026-86410, CVE-2026-86412, CVE-2026-86413, CVE-2026-86414, CVE-2026-86415, CVE-2026-87861, CVE-2026-87862, CVE-2026-87863, CVE-2026-87865, CVE-2026-87866, CVE-2026-92386, CVE-2026-92387, CVE-2026-92388, CVE-2026-92389, CVE-2026-92390, CVE-2026-92391, CVE-2026-92392, CVE-2026-94265, CVE-2026-94266, CVE-2026-107928, CVE-2026-107929)
  • elfutils: version 0.196-2 -> 0.197
  • ethtool: version 7.1-2 -> 7.2
  • freetype: version 2.14.3-2 -> 2.15.0
  • glib2: version 2.90.0 -> 2.90.1
  • glibc-zoneinfo: version 2026d -> 2026e
  • grub: version 2.14-5 -> 2.16-4
  • harfbuzz: version 14.5.0 -> 14.6.0
  • inotify-tools: version 4.26.262 -> 4.26.270
  • libX11: version 1.8.13-2 -> 1.8.14 (CVE-2026-88806, CVE-2026-94283, CVE-2026-94284, CVE-2026-94285)
  • libXi: version 1.8.3-2 -> 1.8.4 (CVE-2026-93541, CVE-2026-93542, CVE-2026-93543, CVE-2026-93544, CVE-2026-93545, CVE-2026-94282, CVE-2026-109089, CVE-2026-109090)
  • libXpm: version 3.5.19-2 -> 3.5.20 (CVE-2026-94287)
  • libXrender: version 0.9.12-2 -> 0.9.13 (CVE-2026-88807)
  • libXtst: version 1.2.5-2 -> 1.2.6 (CVE-2026-94286, CVE-2026-109088)
  • libarchive: version 3.8.9-2 -> 3.8.10 (security fix noted; no CVE IDs listed)
  • libdrm: version 2.4.134-2 -> 2.4.134-3
  • libevdev: version 1.13.7-2 -> 1.14.0
  • libpng: version 1.6.58-2 -> 1.6.59 (CVE-2026-46675)
  • libunistring: version 1.4.2-2 -> 1.5
  • libvirt-php: version 0.5.8-8.4.26_LT -> 0.5.8-8.4.27_LT
  • libzip: version 1.11.4-2 -> 1.12.1
  • lvm2: version 2.03.42-2 -> 2.03.43
  • mesa: version 26.2.3-2 -> 26.2.5
  • network-scripts: version 16.0-2 -> 16.0-7
  • nfs-utils: version 3.1.1-2 -> 3.1.1-3
  • nginx: version 1.30.4-1_SBo_LT -> 1.30.6-1_SBo_LT (NVD: CVE-2026-15176)
  • ngtcp2: version 1.25.0-2 -> 1.25.0-3
  • noto-fonts-ttf: version 2026.09.01-2 -> 2026.10.01
  • openssh: version 10.5p1-2 -> 10.6p1 (security fix noted; no CVE IDs listed)
  • openssl: version 3.5.8-2 -> 3.5.9 (CVE-2026-35189, CVE-2026-35191, CVE-2026-42772, CVE-2026-54872, CVE-2026-54873, CVE-2026-54875, CVE-2026-72897, CVE-2026-75804, CVE-2026-75805, CVE-2026-75806, CVE-2026-77696, CVE-2026-84782, CVE-2026-84784)
  • php: version 8.4.26-1_LT -> 8.4.27-1_LT
  • pkgtools: version 16.0 -> 16.0-3
  • spirv-llvm-translator: version 23.1.1 -> 23.1.2
  • sqlite: version 3.53.4-2 -> 3.54.1
  • sysvinit-scripts: version 16.0-4 -> 16.0-8
  • xorg-server: version 21.1.24-2 -> 21.1.25-2 (CVE-2026-88812, CVE-2026-93515, CVE-2026-93516, CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-93520, CVE-2026-93521, CVE-2026-93523, CVE-2026-93524, CVE-2026-93536)
  • xterm: version 411-2 -> 412
  • zfs: version 2.4.4_6.18.54_Unraid-1_LT -> 2.4.4_6.18.58_Unraid-1_LT