Unraid OS 7.3.4 Now Available

All users are encouraged to update to receive the security fixes in this release. The changes below are compared with Unraid OS 7.3.3.

Security

This release includes PHP 8.4.27, which patches CVE-2026-109618 and CVE-2026-109619, a pair of critical (CVSS 9.2) unauthenticated remote code execution vulnerabilities in PHP. It also includes WebGUI security fixes.

Notable package security updates compared with 7.3.3:

• PHP 8.4.27 (CVE-2026-109618, CVE-2026-109619).
• curl 8.22.0 → 8.23.0, addressing 21 CVEs.
• OpenSSL 3.5.8 → 3.5.9, addressing 13 CVEs.
• xorg-server 21.1.24 → 21.1.25, addressing 11 CVEs.
• libXi 1.8.3 → 1.8.4, addressing 8 CVEs.
• nginx 1.30.4 → 1.30.6 (CVE-2026-15176).
• libX11, libXtst, libXpm, libXrender, and libpng also receive CVE fixes, and openssh and libarchive receive security fixes.

The full 7.3.4 release notes contain the package-by-package changelog and CVE annotations.

Linux Kernel

The Linux kernel is updated to 6.18.58-Unraid.

Docker / File Manager

This release fixes Docker icon handling and File Manager operations.

Base Distro

This release updates the underlying system packages with security fixes and maintenance improvements. It includes 44 package updates compared with Unraid OS 7.3.3. See the full release notes for the complete package list.