October 23Oct 23 Unraid OS 7.2.9 is a targeted maintenance release for the 7.2 branch. It includes PHP security fixes, an Unraid API update from 4.36.1 to 4.37.7, and updates addressing the compromised CA certificates referenced in the eMudhra certificate-compromise report. The kernel version is unchanged from 7.2.8.We highly recommend updating to the latest stable release, Unraid OS 7.3.4, for its newer kernel and broader package security updates. Changes vs. 7.2.8SecurityPHP 8.4.23 → 8.4.27 to address multiple CVEsAddressed the compromised CA certificates referenced in the Unit 42 reportUnraid APIUpdated from 4.36.1 to 4.37.7Bundled Node.js runtime updated to 22.23.4, resolving the Node.js certificate-compromise issue (full API comparison)Base Distro4 packages updated: ca-certificates 20261020, dynamix.unraid.net (Unraid API) 4.37.7, libvirt-php 0.5.8-8.4.27_LT, and php 8.4.27-1_LTSecurity Advisory: Additional Potential Vulnerabilities7.2.9 does not include the broader distro-package or kernel security updates available in newer releases. As of October 23, 2026, upstream package advisories identify 115 potential CVEs associated with included package versions, across curl, BIND, OpenSSL, libssh, p11-kit, xorg-server and X11 libraries, Samba, libpcap, util-linux, and libpng. Newer upstream kernel releases also contain security fixes not included in 7.2.9. Full breakdown in the release notes.Updating to 7.2.9 alone should not be interpreted as resolving every potential finding.Known IssuesNo new release-specific known issues are documented. See the 7.2.8 release notes for issues that may still apply.Rolling BackNo release-specific rollback warnings or compatibility limits are documented.LinksRelease NotesUpdating UnraidLicense FAQAs always, please report any bugs on the Bug Reports board.
October 24Oct 24 While I do not need it, I like that you release it. Thank you for the effort. (Interesting that there is only silence from all the complainers….) Edited October 24Oct 24 by metabotschafter
October 24Oct 24 Many thanks, although I did end up jmmy rigging an updated php install in the interim. Always better to be native.
October 25Oct 25 Feedback from another user whom wasn't impacted, but glad to see Limetech provide a security release as promised for those who purchased an earlier version. Edited October 25Oct 25 by ConnerVT drinking
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.