Skip to main content

Version 7.3.4 2026-10-22

This release includes updated system packages and security fixes, including PHP 8.4.27, which addresses multiple reported PHP vulnerabilities. All users are encouraged to update.

Upgrading​

For step-by-step instructions, see Updating Unraid. Questions about your license? Review the License FAQ.

Rolling back​

  • No release-specific rollback warnings are noted.

Base distro updates​

Updated packages (44)​

  • aaa_base: version 16.0 -> 16.0-3
  • at-spi2-core: version 2.62.0.1-2 -> 2.62.1
  • ca-certificates: version 20260910 -> 20261020
  • cairo: version 1.18.4-2 -> 1.18.6
  • cifs-utils: version 7.8 -> 7.9
  • cryptsetup: version 2.8.8 -> 2.8.8-2
  • curl: version 8.22.0 -> 8.23.0 (CVE-2026-86410, CVE-2026-86412, CVE-2026-86413, CVE-2026-86414, CVE-2026-86415, CVE-2026-87861, CVE-2026-87862, CVE-2026-87863, CVE-2026-87865, CVE-2026-87866, CVE-2026-92386, CVE-2026-92387, CVE-2026-92388, CVE-2026-92389, CVE-2026-92390, CVE-2026-92391, CVE-2026-92392, CVE-2026-94265, CVE-2026-94266, CVE-2026-107928, CVE-2026-107929)
  • elfutils: version 0.196-2 -> 0.197
  • ethtool: version 7.1-2 -> 7.2
  • freetype: version 2.14.3-2 -> 2.15.0
  • glib2: version 2.90.0 -> 2.90.1
  • glibc-zoneinfo: version 2026d -> 2026e
  • grub: version 2.14-5 -> 2.16-4
  • harfbuzz: version 14.5.0 -> 14.6.0
  • inotify-tools: version 4.26.262 -> 4.26.270
  • libX11: version 1.8.13-2 -> 1.8.14 (CVE-2026-88806, CVE-2026-94283, CVE-2026-94284, CVE-2026-94285)
  • libXi: version 1.8.3-2 -> 1.8.4 (CVE-2026-93541, CVE-2026-93542, CVE-2026-93543, CVE-2026-93544, CVE-2026-93545, CVE-2026-94282, CVE-2026-109089, CVE-2026-109090)
  • libXpm: version 3.5.19-2 -> 3.5.20 (CVE-2026-94287)
  • libXrender: version 0.9.12-2 -> 0.9.13 (CVE-2026-88807)
  • libXtst: version 1.2.5-2 -> 1.2.6 (CVE-2026-94286, CVE-2026-109088)
  • libarchive: version 3.8.9-2 -> 3.8.10 (security fix noted; no CVE IDs listed)
  • libdrm: version 2.4.134-2 -> 2.4.134-3
  • libevdev: version 1.13.7-2 -> 1.14.0
  • libpng: version 1.6.58-2 -> 1.6.59 (CVE-2026-46675)
  • libunistring: version 1.4.2-2 -> 1.5
  • libvirt-php: version 0.5.8-8.4.26_LT -> 0.5.8-8.4.27_LT
  • libzip: version 1.11.4-2 -> 1.12.1
  • lvm2: version 2.03.42-2 -> 2.03.43
  • mesa: version 26.2.3-2 -> 26.2.5
  • network-scripts: version 16.0-2 -> 16.0-7
  • nfs-utils: version 3.1.1-2 -> 3.1.1-3
  • nginx: version 1.30.4-1_SBo_LT -> 1.30.6-1_SBo_LT (NVD: CVE-2026-15176)
  • ngtcp2: version 1.25.0-2 -> 1.25.0-3
  • noto-fonts-ttf: version 2026.09.01-2 -> 2026.10.01
  • openssh: version 10.5p1-2 -> 10.6p1 (security fix noted; no CVE IDs listed)
  • openssl: version 3.5.8-2 -> 3.5.9 (CVE-2026-35189, CVE-2026-35191, CVE-2026-42772, CVE-2026-54872, CVE-2026-54873, CVE-2026-54875, CVE-2026-72897, CVE-2026-75804, CVE-2026-75805, CVE-2026-75806, CVE-2026-77696, CVE-2026-84782, CVE-2026-84784)
  • php: version 8.4.26-1_LT -> 8.4.27-1_LT
  • pkgtools: version 16.0 -> 16.0-3
  • spirv-llvm-translator: version 23.1.1 -> 23.1.2
  • sqlite: version 3.53.4-2 -> 3.54.1
  • sysvinit-scripts: version 16.0-4 -> 16.0-8
  • xorg-server: version 21.1.24-2 -> 21.1.25-2 (CVE-2026-88812, CVE-2026-93515, CVE-2026-93516, CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-93520, CVE-2026-93521, CVE-2026-93523, CVE-2026-93524, CVE-2026-93536)
  • xterm: version 411-2 -> 412
  • zfs: version 2.4.4_6.18.54_Unraid-1_LT -> 2.4.4_6.18.58_Unraid-1_LT