Version 7.3.3-rc.2 2026-09-24
Unraid OS 7.3.3-rc.2 includes security fixes, updates the Linux kernel to 6.18.52, adds configurable power-button actions and hardware support, and fixes Docker, File Manager, and WebGUI issues.
We expect this release to enter stable next week (week of September 27).
Upgrading
For step-by-step instructions, see Updating Unraid. Questions about your license? Review the License FAQ.
Known issues
No new release-specific known issues are listed. See the Unraid OS 7.3.2 release notes for previously documented issues.
Rolling back
For rollback guidance and compatibility limitations, see the Unraid OS 7.3.2 release notes.
Changes vs. Unraid OS 7.3.2
Security
- Hardened root password setup, validated OpenTerminal request inputs before they reach privileged commands, and prevented guest-provided interface names from being interpreted as HTML in VM Manager.
- Updated base distro packages with security fixes; CVE annotations are listed with the corresponding package updates below.
Containers / Docker
- Fix: Docker Manager no longer removes the shared default icon when an icon-less container is removed or updated.
Storage
- Fix: Fixed File Manager copy and move operations could fail with a symlink-depth error.
- Fix: Prevented shfs deadlocks when concurrent file-lock requests exhaust the FUSE worker pool.
- Fix: Prevented an shfs assertion failure that could cause
/mnt/userto become unavailable.
WebGUI / System
- New: Configure the physical power button under Settings > Power Options to shut down, reboot, or do nothing.
- Fix: Corrected stopped-array utilization display and restored used/free statistics for a mounted Boot Device when the array is stopped.
Networking / Hardware
- New: Added kernel drivers and firmware for additional Intel, MediaTek, and Realtek wireless hardware.
Virtualization
- New: Added kernel support for Hyper-V graphics, ballooning, storage, keyboard, VMBus, utility, and VSOCK components.
Unraid API
- Update dynamix.unraid.net 4.37.4 - see changes.
Linux kernel
- Linux kernel: update to 6.18.52-Unraid.
Base distro updates
Downgraded packages (1)
- shared-mime-info: version 2.5.1 -> 2.4-3 (Slackware maintainer downgrade)
Added packages (1)
- ledctl: version 1.1.0
Updated packages (319)
- aaa_base: version 15.1-2 -> 15.1-3 (security fix noted; no CVE IDs listed)
- aaa_glibc-solibs: version 2.43 -> 2.44-7
- aaa_libraries: version 15.1-51 -> 16.0
- acl: version 2.4.0 -> 2.4.0-2
- acpid: version 2.0.34-2 -> 2.0.34-3
- adwaita-icon-theme: version 50.0 -> 51.0
- appres: version 1.0.7 -> 1.0.7-2
- at: version 3.2.5 -> 3.2.5-2
- at-spi2-core: version 2.60.5 -> 2.60.6-2
- attr: version 2.6.0 -> 2.6.0-2
- bash: version 5.3.015-2 -> 5.3.020
- bin: version 11.1-5 -> 11.1-6
- bind: version 9.20.24-2 -> 9.20.27-2
- bluez-firmware: version 1.2-4 -> 1.2-5
- bridge-utils: version 1.7.1 -> 1.7.1-2
- brotli: version 1.2.0 -> 1.2.0-2
- btrfs-progs: version 7.0 -> 7.1-2
- bzip2: version 1.0.8-3 -> 1.0.8-4 (CVE-2016-3189, CVE-2019-12900)
- ca-certificates: version 20260616 -> 20260910
- cairo: version 1.18.4 -> 1.18.4-2
- cifs-utils: version 7.6 -> 7.7-2
- coreutils: version 9.11 -> 9.12
- cpio: version 2.15 -> 2.15-2
- cpufrequtils: version 008-4 -> 008-5
- cracklib: version 2.10.3 -> 2.10.3-2
- cryptsetup: version 2.8.6 -> 2.8.8
- curl: version 8.21.0 -> 8.22.0 (CVE-2026-13608, CVE-2026-18924, CVE-2026-19931, CVE-2026-80229, CVE-2026-80230, CVE-2026-80231, CVE-2026-80255, CVE-2026-82208, CVE-2026-82209)
- db48: version 4.8.30-6 -> 4.8.30-7
- dbus: version 1.16.2-4 -> 1.16.2-5
- dbus-glib: version 0.114 -> 0.114-2
- dejavu-fonts-ttf: version 2.37-8 -> 2.37-9
- diffutils: version 3.12 -> 3.12-2
- dmidecode: version 3.7 -> 3.7-2
- dnsmasq: version 2.93 -> 2.93-2 (CVE-2026-2291)
- docker: version 29.5.3-1_LT -> 29.7.1-1_LT
- dosfstools: version 4.2-2 -> 4.2-3
- dynamix.unraid.net: version 4.35.1 -> 4.37.4-5
- e2fsprogs: version 1.47.4 -> 1.47.4-2
- ebtables: version 2.0.11-3 -> 2.0.11-4
- editres: version 1.1.1 -> 1.1.1-2
- efibootmgr: version 18 -> 18-2
- efivar: version 20201015_cff88dd -> 20201015_cff88dd-2
- elfutils: version 0.195 -> 0.196-2
- elogind: version 255.27 -> 257.16-4
- elvis: version 2.2_0-9 -> 2.2_0-10
- encodings: version 1.1.0 -> 1.1.0-2
- etc: version 15.1-17 -> 15.1-18
- ethtool: version 7.0 -> 7.1-2
- eudev: version 3.2.14-3 -> 3.2.14-5
- exfatprogs: version 1.4.2 -> 1.4.3-2
- file: version 5.48 -> 5.48-2
- findutils: version 4.10.0 -> 4.11.0-2
- flex: version 2.6.4-5 -> 2.6.4-6
- floppy: version 5.6-2 -> 5.6-3
- fontconfig: version 2.18.1 -> 2.18.3-2
- freeglut: version 3.8.0 -> 3.8.0-2
- freetype: version 2.14.3 -> 2.14.3-2
- fribidi: version 1.0.16 -> 1.0.16-2
- fuse3: version 3.16.2-2 -> 3.16.2-3_LT
- gawk: version 5.4.0 -> 5.4.1-2
- gd: version 2.3.3-3 -> 2.3.3-4
- gdbm: version 1.26 -> 1.26-2
- gdk-pixbuf2: version 2.44.7 -> 2.44.8-2
- gettext: version 1.0 -> 1.0-2
- gettext-tools: version 1.0 -> 1.0-2
- git: version 2.55.0 -> 2.55.0-2
- glew: version 2.3.1 -> 2.3.1-2
- glib2: version 2.88.2 -> 2.90.0
- glibc: version 2.43 -> 2.44-7 (NVD: CVE-2026-4046, CVE-2026-4437, CVE-2026-4438, CVE-2026-5450, CVE-2026-5928)
- glibc-zoneinfo: version 2026b -> 2026d
- glu: version 9.0.3 -> 9.0.3-2
- gmp: version 6.3.0 -> 6.3.0-2
- gnutls: version 3.8.13 -> 3.8.13-2 (CVE-2026-33846)
- gptfdisk: version 1.0.10 -> 1.0.10-2
- graphite2: version 1.3.15-2 -> 1.3.15-3
- grep: version 3.12 -> 3.12-2
- grub: version 2.14-3 -> 2.14-5
- gtk+3: version 3.24.52 -> 3.24.52-2
- gzip: version 1.14 -> 1.14-2
- harfbuzz: version 14.2.1 -> 14.4.0-2
- hdparm: version 9.65 -> 9.65-2
- hicolor-icon-theme: version 0.18 -> 0.18-2
- hostname: version 3.25 -> 3.25-2
- htop: version 3.5.1 -> 3.5.3-2
- icu4c: version 78.3 -> 78.3-2
- inetd: version 1.79s-14 -> 1.79s-15
- infozip: version 6.0-8 -> 6.0-9 (CVE-2014-8139, CVE-2014-8140, CVE-2014-8141, CVE-2016-9844, CVE-2018-18384, CVE-2018-1000035, CVE-2021-4217, CVE-2022-0529, CVE-2022-0530)
- inih: version 62 -> 62-2
- inotify-tools: version 4.25.9.0 -> 4.25.9.0-2
- iproute2: version 7.1.0-2 -> 7.2.0-2
- iptables: version 1.8.13 -> 1.8.13-2
- iputils: version 20250605 -> 20250605-2
- iw: version 6.17 -> 6.17-2
- jansson: version 2.15.1 -> 2.15.1-2
- jemalloc: version 5.3.1 -> 5.3.1-2
- jq: version 1.8.1-1_SBo -> 1.8.2-1_SBo (NVD: CVE-2026-40612, CVE-2026-41256, CVE-2026-41257, CVE-2026-43894, CVE-2026-43895, CVE-2026-43896)
- json-c: version 0.19 -> 0.19-2
- json-glib: version 1.10.8 -> 1.10.8-2
- kbd: version 2.10.0 -> 2.10.0-2
- keyutils: version 1.6.3-3 -> 1.6.3-4
- kmod: version 34.2 -> 34.2-2
- krb5: version 1.22.2-3 -> 1.22.2-4
- lbzip2: version 2.5-4 -> 2.5-5
- less: version 704 -> 704-2
- libICE: version 1.1.2 -> 1.1.2-2
- libSM: version 1.2.6 -> 1.2.6-2
- libX11: version 1.8.13 -> 1.8.13-2
- libXau: version 1.0.12 -> 1.0.12-2
- libXaw: version 1.0.16 -> 1.0.16-2
- libXcomposite: version 0.4.7 -> 0.4.7-2
- libXcursor: version 1.2.3 -> 1.2.3-2
- libXdamage: version 1.1.7 -> 1.1.7-2
- libXdmcp: version 1.1.5 -> 1.1.5-2
- libXevie: version 1.0.3-5 -> 1.0.3-6
- libXext: version 1.3.7 -> 1.3.7-2
- libXfixes: version 6.0.2 -> 6.0.2-2
- libXfont2: version 2.0.7 -> 2.0.9-2 (CVE-2026-44950, CVE-2026-59679)
- libXfontcache: version 1.0.5-5 -> 1.0.5-6
- libXft: version 2.3.9 -> 2.3.9-2
- libXi: version 1.8.3 -> 1.8.3-2
- libXinerama: version 1.1.6 -> 1.1.6-2
- libXmu: version 1.3.1 -> 1.3.1-2
- libXpm: version 3.5.19 -> 3.5.19-2 (CVE-2026-4367)
- libXpresent: version 1.0.2 -> 1.0.2-2
- libXrandr: version 1.5.5 -> 1.5.5-2
- libXrender: version 0.9.12 -> 0.9.12-2
- libXres: version 1.2.3 -> 1.2.3-2
- libXt: version 1.3.1 -> 1.3.1-2
- libXtst: version 1.2.5 -> 1.2.5-2
- libXxf86dga: version 1.1.7 -> 1.1.7-2
- libXxf86misc: version 1.0.4-3 -> 1.0.4-4
- libXxf86vm: version 1.1.7 -> 1.1.7-2
- libaio: version 0.3.113 -> 0.3.113-2
- libarchive: version 3.8.8 -> 3.8.9-2 (security fix noted; no CVE IDs listed)
- libcap-ng: version 0.9.3 -> 0.9.6
- libcbor: version 0.14.0 -> 0.14.0-2
- libcgroup: version 3.2.0 -> 3.2.0-2
- libdeflate: version 1.25 -> 1.26-2
- libdisplay-info: version 0.3.0 -> 0.4.0-2
- libdmx: version 1.1.5 -> 1.1.5-2
- libdrm: version 2.4.134 -> 2.4.134-2
- libedit: version 20260512_3.1 -> 20260512_3.1-2
- libepoxy: version 1.5.10 -> 1.5.10-2
- libevdev: version 1.13.6 -> 1.13.7-2
- libevent: version 2.1.13 -> 2.1.13-2 (security fix noted; no CVE IDs listed)
- libffi: version 3.6.0 -> 3.8.0-2
- libfido2: version 1.17.0-2 -> 1.17.0-3
- libfontenc: version 1.1.9 -> 1.1.9-2
- libgcrypt: version 1.12.2 -> 1.12.4
- libglvnd: version 1.7.0-2 -> 1.7.0-3
- libgpg-error: version 1.61 -> 1.61-2 (security fix noted; no CVE IDs listed)
- libgudev: version 238 -> 238-2
- libidn: version 1.44 -> 1.44-2 (security fix noted; no CVE IDs listed)
- libjpeg-turbo: version 3.2.0 -> 3.2.0-2
- libmaxminddb: version 1.13.3 -> 1.14.0
- libmnl: version 1.0.5 -> 1.0.5-2
- libnetfilter_conntrack: version 1.1.1 -> 1.1.1-2
- libnfnetlink: version 1.0.2 -> 1.0.2-2
- libnftnl: version 1.3.1 -> 1.3.2
- libnl3: version 3.12.0 -> 3.12.0-2
- libnvme: version 1.16.2 -> 1.16.2-2
- libpcap: version 1.10.6 -> 1.10.7 (CVE-2026-0799, CVE-2026-6244, CVE-2026-6554, CVE-2026-18238, CVE-2026-18313, CVE-2026-31911, CVE-2026-31912)
- libpciaccess: version 0.19 -> 0.19-2
- libpng: version 1.6.58 -> 1.6.58-2
- libpsl: version 0.22.0 -> 0.23.3-2
- libpthread-stubs: version 0.5 -> 0.5-2
- libseccomp: version 2.6.1 -> 2.6.1-2 (security fix noted; no CVE IDs listed)
- libssh: version 0.12.0 -> 0.12.2-2 (CVE-2026-59843; NVD: CVE-2026-59847)
- libssh2: version 1.11.1 -> 1.11.1-2 (CVE-2023-48795)
- libtasn1: version 4.21.0 -> 4.21.0-2 (CVE-2025-13151)
- libtiff: version 4.7.2 -> 4.7.2-2
- libtirpc: version 1.3.7 -> 1.3.8
- libunistring: version 1.4.2 -> 1.4.2-2
- libunwind: version 1.8.3 -> 1.8.3-2
- liburing: version 2.15 -> 2.15-2
- libusb: version 1.0.30 -> 1.0.30-2
- libusb-compat: version 0.1.9 -> 0.1.9-2
- libuv: version 1.52.1 -> 1.52.1-2
- libvirt-php: version 0.5.8-8.4.23_LT -> 0.5.8_20260609-1_LT
- libwebp: version 1.6.0 -> 1.6.0-2
- libx86: version 1.1.1 -> 1.1.1-2
- libxcb: version 1.17.0 -> 1.17.0-2
- libxcvt: version 0.1.3 -> 0.1.3-2
- libxkbcommon: version 1.13.2 -> 1.13.2-2
- libxkbfile: version 1.2.0 -> 1.2.0-2
- libxml2: version 2.15.3 -> 2.15.4 (NVD: CVE-2026-11979, CVE-2026-86137, CVE-2026-86138, CVE-2026-86139, CVE-2026-86140, CVE-2026-86141, CVE-2026-86142, CVE-2026-86143, CVE-2026-86144)
- libxshmfence: version 1.3.3 -> 1.3.3-2
- libxslt: version 1.1.45 -> 1.1.45-2
- libzip: version 1.11.4 -> 1.11.4-2
- listres: version 1.0.7 -> 1.0.7-2
- lmdb: version 1.0.0 -> 1.0.2
- logrotate: version 3.22.0 -> 3.22.0-2
- lsof: version 4.99.7 -> 4.99.7-2
- lsscsi: version 0.32 -> 0.32-2
- lvm2: version 2.03.41 -> 2.03.42-2
- lz4: version 1.10.0-2 -> 1.10.0-3
- lzip: version 1.26 -> 1.26-2
- lzlib: version 1.16 -> 1.16-2
- lzo: version 2.10-4 -> 2.10-5
- mc: version 4.8.33 -> 4.8.33-2
- mcelog: version 210 -> 212-2
- mesa: version 26.1.4 -> 26.2.2
- mkfontscale: version 1.2.4 -> 1.2.4-2
- mpfr: version 4.2.2 -> 4.2.2-2
- mtdev: version 1.1.7 -> 1.1.7-2
- nano: version 9.1 -> 9.2-2
- ncompress: version 5.0-2 -> 5.0-3
- ncurses: version 6.6 -> 6.6-2
- net-tools: version 20181103_0eebece-5 -> 20181103_0eebece-6 (CVE-2025-46836)
- nettle: version 3.10.2 -> 3.10.2-2
- network-scripts: version 15.1 -> 15.1-2
- nfs-utils: version 2.9.1 -> 2.9.2-2
- nghttp2: version 1.69.0 -> 1.70.0-2
- nghttp3: version 1.17.0 -> 1.18.0-2
- nginx: version 1.30.3-1_SBo_LT -> 1.30.4-1_SBo_LT (NVD: CVE-2026-60005)
- ngtcp2: version 1.24.0 -> 1.25.0-2
- noto-fonts-ttf: version 2026.07.01 -> 2026.09.01-2
- ntfs-3g: version 2026.2.25 -> 2026.7.7-2
- ntp: version 4.2.8p18-8 -> 4.2.8p18-10
- nvme-cli: version 2.16 -> 2.16-2
- oniguruma: version 6.9.10 -> 6.9.10-2
- openssh: version 10.4p1 -> 10.5p1-2 (security fix noted; no CVE IDs listed)
- openssl: version 3.5.7 -> 3.5.8-2 (CVE-2026-14456, CVE-2026-14457, CVE-2026-18798, CVE-2026-54874, CVE-2026-63072, CVE-2026-63073, CVE-2026-63074, CVE-2026-63075, CVE-2026-63076, CVE-2026-75803)
- p11-kit: version 0.26.2 -> 0.26.5-2 (CVE-2026-18938)
- pam: version 1.7.2-2 -> 1.7.2-3
- pango: version 1.58.0 -> 1.58.2-2
- parted: version 3.7 -> 3.7-2
- patch: version 2.8 -> 2.8-2 (CVE-2018-6951, CVE-2018-6952, CVE-2018-20969, CVE-2018-1000156, CVE-2019-13636, CVE-2019-13638, CVE-2019-20633)
- pciutils: version 3.15.0 -> 3.15.0-2
- pcre: version 8.45 -> 8.45-2
- pcre2: version 10.47 -> 10.48-2 (security fix noted; no CVE IDs listed)
- perl: version 5.42.2-2 -> 5.44.0-2
- php: version 8.4.23-1_LT -> 8.4.24-1_LT (CVE-2026-7260, CVE-2026-9672, CVE-2026-17543, CVE-2026-17544)
- pixman: version 0.46.4 -> 0.46.4-2
- pkgtools: version 15.1-32 -> 15.1-34
- procps-ng: version 4.0.6 -> 4.0.7-2
- qrencode: version 4.1.1-3 -> 4.1.1-4
- readline: version 8.3.003 -> 8.3.003-2
- rsync: version 3.4.4 -> 3.5.0-2 (security fix noted; no CVE IDs listed)
- samba: version 4.22.10-2_LT -> 4.22.11-2_LT (CVE-2026-6949, CVE-2026-58216, CVE-2026-58218, CVE-2026-58221, CVE-2026-58222, CVE-2026-58224)
- sdparm: version 1.12-3 -> 1.12-5
- sed: version 4.10 -> 4.10-2
- sessreg: version 1.1.4 -> 1.1.4-2
- setxkbmap: version 1.3.5 -> 1.3.5-2
- sg3_utils: version 1.48 -> 1.49-2
- shadow: version 4.19.4-6 -> 4.19.4-7 (security fix noted; no CVE IDs listed)
- smartmontools: version 7.5 -> 7.5-2
- spirv-llvm-translator: version 22.1.4 -> 22.1.6
- sqlite: version 3.53.3 -> 3.53.4-2
- startup-notification: version 0.12-5 -> 0.12-6
- sudo: version 1.9.17p2 -> 1.9.17p2-2
- sysfsutils: version 2.1.1 -> 2.1.1-2
- sysstat: version 12.7.9 -> 12.8.0-2
- sysvinit: version 3.18 -> 3.18-3
- sysvinit-scripts: version 15.1-38 -> 16.0
- talloc: version 2.4.4 -> 2.5.0-2
- tar: version 1.35 -> 1.35-2
- tcp_wrappers: version 7.6-7 -> 7.6-8
- tdb: version 1.4.15 -> 1.4.15-2
- telnet: version 0.17-8 -> 0.17-9 (CVE-2020-10188)
- tevent: version 0.17.1 -> 0.17.2-2
- traceroute: version 2.1.6 -> 2.1.6-2
- transset: version 1.0.4 -> 1.0.4-2
- tree: version 2.3.2 -> 2.3.2-2
- usbutils: version 019 -> 019-2
- userspace-rcu: version 0.15.6 -> 0.15.7
- utempter: version 1.2.3 -> 1.2.3-2
- util-linux: version 2.42.2 -> 2.42.3 (CVE-2024-28085, CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, CVE-2026-78410)
- vbetool: version 1.2.2-4 -> 1.2.2-5
- vsftpd: version 3.0.5-4 -> 3.0.5-5
- wayland: version 1.25.0 -> 1.26.0-2
- wget: version 1.25.0 -> 1.25.0-2 (CVE-2024-10524)
- which: version 2.25 -> 2.25-2
- wireguard-tools: version 1.0.20260223 -> 1.0.20260223-2
- wireless-regdb: version 2026.05.30 -> 2026.09.03
- wpa_supplicant: version 2.11-2 -> 2.12-2 (security fix noted; no CVE IDs listed)
- wqy-zenhei-font-ttf: version 0.9.45 -> 0.9.45-2
- xauth: version 1.1.5 -> 1.1.5-2
- xcb-util: version 0.4.1 -> 0.4.1-2
- xcb-util-keysyms: version 0.4.1 -> 0.4.1-2
- xclock: version 1.2.0 -> 1.2.1-2
- xdpyinfo: version 1.4.0 -> 1.4.0-2
- xdriinfo: version 1.0.8 -> 1.0.8-2
- xev: version 1.2.7 -> 1.2.7-2
- xf86-input-evdev: version 2.11.0 -> 2.11.0-2
- xf86-input-synaptics: version 1.10.0 -> 1.10.0-2
- xf86-video-mga: version 2.1.0 -> 2.1.0-2
- xf86-video-vesa: version 2.6.0 -> 2.6.0-2
- xfsprogs: version 7.0.1 -> 7.1.1-2
- xhost: version 1.0.10 -> 1.0.10-2
- xinit: version 1.4.4-2 -> 1.4.4-3
- xkbcomp: version 1.5.0 -> 1.5.0-2
- xkbevd: version 1.1.6 -> 1.1.6-2
- xkbutils: version 1.0.6 -> 1.0.7-2
- xkeyboard-config: version 2.48 -> 2.48-2
- xkill: version 1.0.7 -> 1.0.7-2
- xload: version 1.2.0 -> 1.2.2-2
- xlsatoms: version 1.1.4 -> 1.1.5-2
- xlsclients: version 1.1.6 -> 1.1.6-2
- xmessage: version 1.0.7 -> 1.0.7-2
- xmodmap: version 1.0.11 -> 1.0.12-2
- xorg-server: version 21.1.23 -> 21.1.24-2 (CVE-2026-55999, CVE-2026-56000)
- xprop: version 1.2.8 -> 1.2.8-2
- xrandr: version 1.5.4 -> 1.5.4-2
- xrdb: version 1.2.2 -> 1.2.3-2
- xrefresh: version 1.1.0 -> 1.1.1-2
- xset: version 1.2.5 -> 1.2.6-2
- xsetroot: version 1.1.3 -> 1.1.4-2
- xsm: version 1.0.6 -> 1.0.6-2
- xterm: version 410 -> 411-2
- xtrans: version 1.6.0 -> 1.6.0-2
- xwd: version 1.0.9 -> 1.0.10-2
- xwininfo: version 1.1.6 -> 1.1.7-2
- xwud: version 1.0.7 -> 1.0.8-2
- xxHash: version 0.8.3 -> 0.8.3-2
- xz: version 5.8.3 -> 5.8.4 (security fix noted; no CVE IDs listed)
- zfs: version 2.4.3_6.18.38_Unraid-1_LT -> 2.4.4_6.18.52_Unraid-1_LT
- zlib: version 1.3.2 -> 1.3.2-2 (security fix noted; no CVE IDs listed)
- zstd: version 1.5.7 -> 1.5.7-3