v0.74.7

Henry-23/VideoChatv0.74.7Jul 17, 2026by lixmal

AI Summary

A maintenance patch release focusing on QUIC connection handling, security, and client configuration improvements.

Key Highlights

  • QUIC concurrent handling to prevent handshake head-of-line blocking
  • SSH config sanitization to prevent injection
  • Flag injection prevention
  • SOCKS5 proxy binding to 127.0.0.1

New Features

  • QUIC concurrent handling
  • SSH config sanitization
  • Firewall ACL evaluation
  • SOCKS5 proxy binding

Full Release Notes

## What's Changed
* [relay] Handle QUIC connections concurrently to prevent handshake head-of-line blocking by @lixmal in https://github.com/netbirdio/netbird/pull/6784
* [client] Reject leading hyphen in getent input to prevent flag injection by @lixmal in https://github.com/netbirdio/netbird/pull/6787
* [client] Sanitize peer FQDN/hostname in generated SSH config by @riccardomanfrin in https://github.com/netbirdio/netbird/pull/6805
* [client] Disable gVisor TCP RACK loss detection on Windows by @lixmal in https://github.com/netbirdio/netbird/pull/6808
* [client] Rename isValidAccessToken to reflect audience-only check by @riccardomanfrin in https://github.com/netbirdio/netbird/pull/6806
* [client] Bind netstack SOCKS5 proxy to 127.0.0.1 by default by @riccardomanfrin in https://github.com/netbirdio/netbird/pull/6812
* [client] Evaluate IP fragments against firewall ACLs by @lixmal in https://github.com/netbirdio/netbird/pull/6781


**Full Changelog**: https://github.com/netbirdio/netbird/compare/v0.74.6...v0.74.7