Saltar al contenido principal

Version 7.4.0 2026-11-10

Unraid OS 7.4.0 adds multiple custom networks and memory limits for Docker containers, Mover progress tracking, improved file operations, a shared task tray, and new boot-device backup and power-button options. It also includes WebGUI and Unraid API security fixes, Linux kernel 6.18.60, and base package updates that address reported CVEs.

Upgrading​

For step-by-step instructions, see Updating Unraid. Questions about your license? Review the License FAQ.

Known issues​

No new release-specific known issues are noted. For known issues carried forward, see the Unraid OS 7.3.4 release notes.

Rolling back​

No new release-specific rollback warnings are documented. For earlier rollback guidance, see the Unraid OS 7.3.4 release notes.

Changes vs. Unraid OS 7.3.4​

Security​

  • The root-password setup flow now shows password setup only when the root account is unconfigured.
  • OpenTerminal validates request inputs before use.
  • WebGUI pages render runtime-provided values as text rather than interpreting them as markup, including values shown in Docker, File Manager, Plugin Manager, wireless, UPS, VM console, and logging pages.
  • Anonymous diagnostics mask network addresses and user-controlled identifiers.
  • Notification agents that connect to public APIs now verify TLS certificates instead of disabling verification.

Containers / Docker​

  • New: Docker container templates support multiple custom networks, and those network attachments are retained when containers are updated or recreated.
  • New: Docker Add/Edit forms include a Memory limit field in Advanced View and a live icon preview beside the Icon URL field.
  • Improvement: Docker registry update checks support OCI image manifests and indexes and identify the Unraid client.
  • Fix: Docker icon handling no longer deletes the shared default icon or repeatedly retries an unavailable fallback image.
  • Fix: Orphan image rows display the Created date in the correct column.

Storage​

  • New: Mover progress and status tracking is available.
  • Improvement: Mover preserves hard links while moving files.
  • Improvement: File Manager keeps exclusive shares under /mnt/user and safely handles their paths during copy and move operations, fixing cross-share and pool moves that could lose source files.
  • Fix: Stopped arrays no longer show 100% utilization, and mounted boot partitions retain their used/free statistics.
  • Improvement: Pressing Enter after entering a valid encrypted-array passphrase starts the array.

WebGUI / System​

  • New: Added support for the British Columbia timezone.
  • New: Background operations can be managed from a shared task tray, with live or completed output available from any browser tab.
  • New: Boot-device backups offer download-to-computer or save-to-server options, with compression selection and progress reporting.
  • New: Configure the physical power button under Settings → Power Settings → Power Button → Physical power button. Available actions include Shut down, Reboot, and Do nothing.
  • Improvement: Plugin installation progress appears as it arrives, and slow plugin update checks no longer hold up the Installed Plugins page.
  • Improvement: Available plugin updates move to the top of the list as checks complete, and validation failures show their status and reason.
  • Fix: Plugin Manager treats broken plugin links as not installed and runs cleanup hooks correctly when error messages contain shell characters.
  • Fix: Unraid API Status no longer incorrectly reports that the API is not running on first page load.
  • Fix: Power Options no longer shows the virtualization warning on bare-metal systems and retains the Power Button tab when Dynamix System Buttons is installed.

Virtualization​

  • Fix: VM startup no longer logs a PHP deprecation warning when the QEMU location lookup returns no output.

Unraid API​

  • Security:
    • Protected GraphQL operations enforce authorization.
    • Schema metadata requests are blocked when Developer Sandbox is disabled, and request size and query complexity are bounded.
    • Unraid API GraphQL requests now have request-size and query-complexity limits.
    • Schema metadata requests are blocked when Developer Sandbox is disabled.
    • Clients that rely on schema introspection in that mode or exceed the limits may need to be adjusted.
    • Stored OIDC client secrets are no longer returned in API settings or provider responses; configured secrets are preserved when an update omits them.
    • Repeated OIDC authorization requests and callbacks are bounded.

Community contributions​

Thanks to the community contributors whose changes are included in the 7.4 series:

  • junkerderprovinz — live plugin-install progress updates.
  • Mainfrezzer — Docker registry client identification and OCI image support.
  • Joly0 — corrected Docker icon fallback behavior.
  • chodeus — preserved the shared Docker icon and corrected orphan-image date display.
  • Sacred-Shadow — removed TLS verification bypasses from public notification agents.

Linux kernel​

  • Linux kernel: update to 6.18.60-Unraid.

Base distro updates​

Updated packages (16)​

  • bind: version 9.20.29 -> 9.20.30 (CVE-2026-19630, CVE-2026-94300, CVE-2026-96888, CVE-2026-97313)
  • brotli: version 1.2.0-2 -> 1.2.1 (CVE-2026-111497)
  • btrfs-progs: version 7.1-2 -> 7.3
  • coreutils: version 9.12-2 -> 9.12-3
  • dynamix.unraid.net: version 4.37.5-2 -> 4.37.11-2
  • harfbuzz: version 14.6.0 -> 15.0.0
  • iproute2: version 7.2.0-2 -> 7.3.0
  • lmdb: version 1.0.2 -> 1.0.3
  • nano: version 9.2-2 -> 9.3
  • nfs-utils: version 3.1.1-3 -> 3.1.1-4
  • patch: version 2.8-2 -> 2.8.1 (CVE-2026-115207)
  • sysvinit-scripts: version 16.0-8 -> 16.0-10
  • usbutils: version 019-2 -> 020
  • util-linux: version 2.42.4 -> 2.42.4-4 (CVE-2026-78408)
  • xkeyboard-config: version 2.48-2 -> 2.49
  • zfs: version 2.4.4_6.18.58_Unraid-1_LT -> 2.4.4_6.18.60_Unraid-1_LT