Unraid 7.3.1 Now Available

Unraid 7.3.1 is out now with a substantial round of security updates across bind, dnsmasq, nginx, rsync, and several base distro packages, plus a Linux kernel update, Docker and ZFS upgrades, storage fixes, and a handful of WebGUI and networking corrections. Recommended for all users.

Security

This release addresses a significant number of CVEs across core packages. 

• nginx is updated from 1.27.2 to 1.30.1, addressing 13 CVEs.
• bind is updated to 9.20.23, addressing 9 CVEs including CVE-2026-1519, CVE-2026-3039, and CVE-2026-5946.
• rsync is updated to 3.4.3, addressing 6 CVEs.
• dnsmasq is updated to 2.92rel2, addressing 6 CVEs. 

Additionally, avahi, glibc, and jq receive security fixes — avahi covers 5 NVD-referenced CVEs, glibc covers 3, and jq covers 2.

A full list of updated packages and associated CVEs is in the release notes.

Linux Kernel

The Linux kernel is updated to 6.18.33-Unraid.

Docker

Docker engine is updated to 29.5.1.

A fix resolves an issue where the Docker container dropdown menu could become unusable on pages with many containers.

Storage and ZFS

ZFS is updated to 2.4.2.

Several storage fixes are included in this release:

• Unassigned spare disks now spin down as expected.
• Mirrored boot pools can now recover from a degraded state after a member device returns for cache pool usage.
• The pool name validity check when importing existing pools has been relaxed to match pre-7.3 validation behavior, resolving import failures for pools with names that were previously accepted.
• Replacing an online raidz device no longer fails in affected configurations.

WebGUI / System

• Connect version-check logic has been restored, so required updates are detected correctly again.
• File uploads on Safari iOS are now handled correctly.

Networking

A fix resolves a dhcpcd issue where the daemon would wait 60 seconds to obtain an IP address on affected systems.