ljm42

Reserved

Hello plugin authors! We recently published a blog post about some security issues in earlier versions of Unraid and we want to make sure that plugins don’t have similar issues. Please review your plugins for the following potential issues: 1. GET vs POST Use GET sparingly. It is ok when displaying information, like `view.php?id=7` but never for taking action, like `delete.php?id=7`. Any scripts that take action on an input must get that input via POST. In PHP that means using the $_POST and $_GET superglobals specifically rather than the more generic $_REQUEST The CSRF token should never be passed on the querystring via GET. In most cases the webGUI will add it to POST methods automatically. 2. XSS Ensure that any variable is wrapped with `htmlspecialchars($variable)` right before it is output to the browser. This is critical for data that comes from the user via $_POST or $_GET, or from data that is read from config files, or any other place that a user/attacker could affect the contents. It is important to do this right before outputting the variable so there is no risk of running the variable through the htmlspecialchars function twice. Note: this is not strictly necessary if you have already taken steps to ensure the variably only contains integers, or is one of three specific strings, etc. But in general it is safest to always wrap variables before outputting them. 3. Reading config files If you read plugin settings via something like this: $config_file = "/boot/config/$plugin/$plugin.cfg"; $cfg = is_file($config_file) ? @parse_ini_file($config_file, true) : array(); Please consider switching to this: require_once "$docroot/plugins/dynamix/include/Wrappers.php"; // might not be necessary $cfg = parse_plugin_cfg($plugin); This will automatically merge the plugin's config file from the flash drive: /boot/config/plugins/$plugin/$plugin.cfg with a default config (if the plugin has defined one): $docroot/plugins/$plugin/default.cfg And in recent releases it will sanitize the values in the config files to make them safer.

This official Unraid Patch plugin will help protect your server by keeping the OS up to date with the latest patches. This plugin is available for Unraid 6.10.0 and higher, search Community Applications for "Unraid Patch". We plan to use this plugin to distribute bug fixes and security updates to the current release, and may occasionally release security updates for older releases. After installing, visit Tools > Unraid Patch and accept the disclaimer. The plugin submits your server's current version and license key, and gets back the appropriate patches to install. The patches are stored on your flash drive in: /boot/config/plugins/unraid.patch/[version] Visit Tools > Unraid Patch to install them without needing to reboot. On reboot they will automatically be reinstalled, no action needed. To remove the patches and get back to stock, uninstall the plugin and reboot. Note: A reboot is only required if one of the files being patched was already modified by another plugin. The Patch plugin will detect the conflict and advise a reboot. Upon rebooting, the Patch plugin will install first, and patch the files before any other plugin is installed. This will typically prevent conflicts will other plugins. Jan 20, 2025 Security Patch We released a patch to fix a subset of known security issues in older releases (6.10.0-6.12.13), see this blog post for details. Installing this plugin means you get the patch immediately, without having to upgrade or even reboot. But we still recommend upgrading to the current release of Unraid for all the fixes. Unraid 6.12.15 and 7.0.0 have the security fixes built in, so strictly speaking they do not need to have the patch plugin installed at this time. However this can be a powerful tool to aide in not only installing critical security updates in a timely manner, but also fixing bugs without having to wait for a full release. For this reason we recommend having the plugin installed on all versions of Unraid. ... Bug fix patches are now available for Unraid 7.0.0, see the release notes for details. These fixes will be included in the next full release of Unraid as well.

This release includes important bug fixes and security updates. All users are strongly encouraged to read the release notes and upgrade. This announce post is perfect for quick questions or comments, but if you suspect there will be back and forth for your specific issue, please start a new topic under General Support. Be sure to include your diagnostics.zip. Upgrade steps for this release As always, prior to upgrading, create a backup of your USB flash device: "Main/Flash/Flash Device Settings" - click "Flash Backup". Read the release notes. Update all of your plugins. This is critical for the Connect, NVIDIA and Realtek plugins in particular. If the system is currently running 6.12.0 - 6.12.6, we're going to suggest that you stop the array at this point. If it gets stuck on "Retry unmounting shares", open a web terminal and type: umount /var/lib/docker The array should now stop successfully If you have a recent release or Unraid Connect installed Open the dropdown in the top-right of the Unraid webgui and click Check for Update. More details in this blog post If you are on an earlier version Go to Tools -> Update OS and switch to the "Stable" branch if needed. If the update doesn't show, click "Check for Updates" Wait for the update to download and install If you have any plugins that install 3rd party drivers (NVIDIA, Realtek, etc), wait for the notification that the new version of the driver has been downloaded. Reboot This announce post is perfect for quick questions or comments, but if you suspect there will be back and forth for your specific issue, please start a new topic under General Support. Be sure to include your diagnostics.zip.

You have a very complex go script, and it looks like it messes with nginx/php config: cp /boot/config/www.conf /etc/php-fpm.d/ I'd recommend commenting all of your go script mods and re-implementing them one at a time in Unraid 7

Just a quick reminder... this announce post is perfect for quick questions or comments, but if you suspect there will be back and forth for your specific issue, please start a new topic under General Support. Be sure to include your diagnostics.zip.

First set the "date format" field above it to something other than "system setting"

The biggest changes from -rc.2 are around NFS shares, along with some tweaks to the Tailscale integration. Please do upgrade if you are running any of the betas or RCs.

This version of Unraid OS includes significant improvements across all subsystems, while attempting to maintain backward compatibility as much as possible. Please see the release notes for all the details. This announce post is perfect for quick questions or comments, but if you suspect there will be back and forth for your specific issue, please start a new topic under General Support. Be sure to include your diagnostics.zip. Upgrade steps for this release As always, prior to upgrading, create a backup of your USB flash device: "Main/Flash/Flash Device Settings" - click "Flash Backup". Read the release notes. Update all of your plugins. This is critical for the Connect, NVIDIA and Realtek plugins in particular. If the system is currently running 6.12.0 - 6.12.6, we're going to suggest that you stop the array at this point. If it gets stuck on "Retry unmounting shares", open a web terminal and type: umount /var/lib/docker The array should now stop successfully If you have a recent release or Unraid Connect installed Open the dropdown in the top-right of the Unraid webgui and click Check for Update. More details in this blog post If you are on an earlier version Go to Tools -> Update OS and switch to the "Stable" branch if needed. If the update doesn't show, click "Check for Updates" Wait for the update to download and install If you have any plugins that install 3rd party drivers (NVIDIA, Realtek, etc), wait for the notification that the new version of the driver has been downloaded. Reboot This announce post is perfect for quick questions or comments, but if you suspect there will be back and forth for your specific issue, please start a new topic under General Support. Be sure to include your diagnostics.zip. Update: Patches are now available with bug fixes, no reboot required! See the release notes.

One potential cause of a 500 error when logging in was fixed in 6.12.11. If you are on an earlier release try this from the console or SSH: rm /var/log/pwfail/* If that solves the problem, then if it happens again another short term workaround is to login to the webGUI from a different IP address. But really your best bet is to upgrade to the latest stable release.

This release has several bug fixes backported from Unraid 7 as well as important security fixes. All users are strongly encouraged to read the release notes and upgrade. This announce post is perfect for quick questions or comments, but if you suspect there will be back and forth for your specific issue, please start a new topic under General Support. Be sure to include your diagnostics.zip. Upgrade steps for this release Read the release notes. As always, prior to upgrading, create a backup of your USB flash device: "Main/Flash/Flash Device Settings" - click "Flash Backup". Update all of your plugins. This is critical for the Connect, NVIDIA and Realtek plugins in particular. If the system is currently running 6.12.0 - 6.12.6, we're going to suggest that you stop the array at this point. If it gets stuck on "Retry unmounting shares", open a web terminal and type: umount /var/lib/docker The array should now stop successfully If you have a recent release or Unraid Connect installed Open the dropdown in the top-right of the Unraid webgui and click Check for Update. More details in this blog post If you are on an earlier version Go to Tools -> Update OS and switch to the "Stable" branch if needed. If the update doesn't show, click "Check for Updates" Wait for the update to download and install If you have any plugins that install 3rd party drivers (NVIDIA, Realtek, etc), wait for the notification that the new version of the driver has been downloaded. Reboot This announce post is perfect for quick questions or comments, but if you suspect there will be back and forth for your specific issue, please start a new topic under General Support. Be sure to include your diagnostics.zip.

Keep in mind that mods like this are not supported in any way. There is functionality in the webgui that reads the syslinux config files so not everything will work right on Grub. Although we are also testing Grub internally and have been adding support to the webgui. Zero guarantees though, this is not a released feature.

As you know, Connect Flash Backups are not yet encrypted. We worked with the Tailscale plugin author to modify the Tailscale plugin in a way that ensures its sensitive files will not be included in Connect Flash Backups going forward. In order to remove the sensitive files from existing flash backups, you need to delete and recreate your backup. The sensitive files will automatically be excluded from the new backup. This is what the Tailscale plugin is alerting you to.

Just a heads up that soon you will need Unraid 6.12.0 or higher to use Unraid Connect. If you are still on an older version of Unraid, please upgrade the OS or uninstall Unraid Connect.

I commented over there https://forums.unraid.net/bug-reports/stable-releases/61212-temperature-readings-and-fan-control-broke-r3192/?tab=comments#comment-29721

6.12.13 is now available to resolve the issue with drives not spinning down:

This is a quick release that updates the Linux kernel to correct a regression where some HDD devices could not be spun-down. This announce post is perfect for quick questions or comments, but if you suspect there will be back and forth for your specific issue, please start a new topic under General Support. Be sure to include your diagnostics.zip. Upgrade steps for this release Read the release notes. As always, prior to upgrading, create a backup of your USB flash device: "Main/Flash/Flash Device Settings" - click "Flash Backup". Update all of your plugins. This is critical for the Connect, NVIDIA and Realtek plugins in particular. If the system is currently running 6.12.0 - 6.12.6, we're going to suggest that you stop the array at this point. If it gets stuck on "Retry unmounting shares", open a web terminal and type: umount /var/lib/docker The array should now stop successfully If you have a recent release or Unraid Connect installed Open the dropdown in the top-right of the Unraid webgui and click Check for Update. More details in this blog post If you are on an earlier version Go to Tools -> Update OS and switch to the "Stable" branch if needed. If the update doesn't show, click "Check for Updates" Wait for the update to download and install If you have any plugins that install 3rd party drivers (NVIDIA, Realtek, etc), wait for the notification that the new version of the driver has been downloaded. Reboot This announce post is perfect for quick questions or comments, but if you suspect there will be back and forth for your specific issue, please start a new topic under General Support. Be sure to include your diagnostics.zip.

That is the legacy url for the old update process. It is correct now, thanks

Unraid 6.12 continues to benefit from the work being done on Unraid 7, this release has several more bug fixes backported from Unraid 7 as well as a security fix for curl. All users are encouraged to read the release notes and upgrade. This announce post is perfect for quick questions or comments, but if you suspect there will be back and forth for your specific issue, please start a new topic under General Support. Be sure to include your diagnostics.zip. Upgrade steps for this release Read the release notes. As always, prior to upgrading, create a backup of your USB flash device: "Main/Flash/Flash Device Settings" - click "Flash Backup". Update all of your plugins. This is critical for the Connect, NVIDIA and Realtek plugins in particular. If the system is currently running 6.12.0 - 6.12.6, we're going to suggest that you stop the array at this point. If it gets stuck on "Retry unmounting shares", open a web terminal and type: umount /var/lib/docker The array should now stop successfully If you have a recent release or Unraid Connect installed Open the dropdown in the top-right of the Unraid webgui and click Check for Update. More details in this blog post If you are on an earlier version Go to Tools -> Update OS and switch to the "Stable" branch if needed. If the update doesn't show, click "Check for Updates" Wait for the update to download and install If you have any plugins that install 3rd party drivers (NVIDIA, Realtek, etc), wait for the notification that the new version of the driver has been downloaded. Reboot This announce post is perfect for quick questions or comments, but if you suspect there will be back and forth for your specific issue, please start a new topic under General Support. Be sure to include your diagnostics.zip.

Plugin update Aug 13, 2024 2024.08.13.1115 This version adds: The maximum size of any file in the backup is limited to 10MB The overall flash backup size is limited to 100MB. If the flash backup is larger than that it will automatically be deleted and recreated. This removes unused historical information so the backup will take up less space. The `config/plugins/dynamix.file.integrity/logs` directory is now excluded from the backup. This solution is intended to backup configuration information so you can get back up and running quickly, logs are not needed for that. For more information about Flash Backup see https://docs.unraid.net/go/connect-flash-backup/ This version resolves: Fix broken links to the docs

The fix is in the Unraid 7 betas if you'd like to try that, but it hasn't been backported to 6.12 yet

These release has some nice bug fixes backported from our work on Unraid 7, along with a security fix for OpenSSH and updates to the Linux kernel and OpenZFS. All users are encouraged to read the release notes and upgrade. This announce post is perfect for quick questions or comments, but if you suspect there will be back and forth for your specific issue, please start a new topic under General Support. Be sure to include your diagnostics.zip. Upgrade steps for this release Read the release notes. As always, prior to upgrading, create a backup of your USB flash device: "Main/Flash/Flash Device Settings" - click "Flash Backup". Update all of your plugins. This is critical for the Connect, NVIDIA and Realtek plugins in particular. If the system is currently running 6.12.0 - 6.12.6, we're going to suggest that you stop the array at this point. If it gets stuck on "Retry unmounting shares", open a web terminal and type: umount /var/lib/docker The array should now stop successfully If you have a recent release or Unraid Connect installed Open the dropdown in the top-right of the Unraid webgui and click Check for Update. More details in this blog post If you are on an earlier version Go to Tools -> Update OS and switch to the "Stable" branch if needed. If the update doesn't show, click "Check for Updates" Wait for the update to download and install If you have any plugins that install 3rd party drivers (NVIDIA, Realtek, etc), wait for the notification that the new version of the driver has been downloaded. Reboot This announce post is perfect for quick questions or comments, but if you suspect there will be back and forth for your specific issue, please start a new topic under General Support. Be sure to include your diagnostics.zip.