Overview
This article lists all available hot fixes and patches for ProfileUnity with FlexApp, organized by release. The current supported release is 6.9.5. Customers on older releases are encouraged to upgrade; versions at End of Life receive no further fixes.
Supported versions reflect the minimum build required. For OS compatibility refer to the ProfileUnity Client Side OS Support Matrix. For component build numbers by version see the ProfileUnity Version Matrix.
Every GA and hot fix release is inventoried in the ProfileUnity with FlexApp — Third-Party & Open Source Software Inventory, which publishes a per-release list of the CVEs resolved — enumerated by CVE identifier and by the component whose update addressed them — alongside the component list and the CycloneDX 1.6 SBOM. Refer to that article when you need to confirm which vulnerabilities a given hot fix remediates.
| Contents | ||
| › Shared Components | MongoDB Update Tool | 7.0.45 |
| .NET Core Runtimes | 10.0.13 | 8.0.32 | |
|
› Hot Fixes — 6.9.5 CURRENT RELEASE |
Client Tools | HF4 • 6.9.5.9783 |
| Management Console | HF4 • 6.9.5.9783 | |
| FlexApp Packaging Console | HF4 • 6.9.5.9783 | |
| FlexApp One | HF4 • 6.9.5.9783 | |
| FlexApp Packaging Automation | HF4 • 6.9.5.9783 | |
| › Older Releases | 6.8.7 R2 EXTENDED SUPPORT | Client HF4 • Console HF2 |
| 6.8.7 R1 EXTENDED SUPPORT | Client HF3 • Console HF1 | |
| 6.8.6 GA & R1 LIMITED SUPPORT | Client HF3 | |
| 6.8.5 GA & R1 EOL | Client HF7 | |
| 6.8.4 and Earlier EOL | Archived • contact Support | |
| › End of Life Versions | Full EOL version list with support end dates | |
Latest Patches — 6.9.5
MongoDB Update Tool
| Mongo 7.0.45 Updated 10-19-26 • Release Notes | |
|
Download Choose by your Console version |
ProfileUnity 6.9.5 and aboveProfileUnity.Mongo.Setup_7.0.45.exe ChecksumsMD5
3aba6f7cc04dd62ee0b7bc424f979d9fSHA256
a39fbe12ae36cb249e1e3e5cb54dd164541d7099812780cea86e8775e7a35bc3
ProfileUnity 6.8.7 R2 and belowProfileUnity.Mongo.Setup_7.0.45.exe ChecksumsMD5
227884e46210063f01df1846ba67f127SHA256
e0883be6699f3ba5c01416f1b6048c8e2090515dbd6d7fb7862307733cf03c1b
|
| Fixes & Changes |
|
| Upgrade Instructions: See Upgrade to Mongo 5.0.32/7.0.28 and Above Using Mongo Update Tool | |
.NET Core Runtimes
| .NET Core Runtimes Updated 10-19-26 | |
|
Download Choose by your ProfileUnity version |
ProfileUnity 6.9.5 EditionProfileUnity 6.8.7 Editions |
| Changes |
|
Hot Fixes — 6.9.5
Client Tools — 6.9.5
| Client HF4 (6.9.5.9783) Updated 10-19-26 | |
| Download |
Console deployment package ChecksumsMD5
47198696a19612cc7b0c5e847c9e3e99SHA256
6af341ddc6e94b1d44f8baaa39b3d6df2de28e1908c820b55de9579ee77995fd
NOTE: Review the README.txt for full installation details.
Standalone client installers ProfileUnityClient.Setup_6.9.5hf4.exe ChecksumsMD5
3d39349fd7f31bf2be9f6a96973965cdSHA256
fa4a3722aa6d166599b6d0e663d5e752ad7792059f9476f9e295f535788e5bc8
ProfileUnityClient.Setup_6.9.5hf4.msi ChecksumsMD5
dcbc5c2e88ebd5948f37a308eca3795aSHA256
68f67a039d82e5fc00db3d094a604fb0feea9cf689e02b06f8bfb609068effd8
|
| Fixes & Changes |
|
Client HF3 (6.9.5.9750) SUPERSEDED BY HF4
▼ Show
Superseded by HF4, which is cumulative and includes every fix listed here.
Client HF3 (6.9.5.9750) — 9-15-26
- Updated .NET Core to 10.0.12
- Updated the FlexApp filter driver to CBFS Filter 24.0.9735
- FlexApp packages are now mounted individually by default; the bulk mount group size default is now 1
- Resolved an issue where an expired FlexApp package lock wait was recorded as a successful lock, allowing a package held by another session to be processed without synchronization and leaving logon or logoff unable to complete
- Resolved an issue where FlexApp bulk mount was skipped whenever the bulk mount directory contained empty subdirectories, silently stopping package delivery until those directories were removed
Client HF2 (6.9.5.9721) SUPERSEDED BY HF3
▼ Show
Superseded by HF3, which is cumulative and includes every fix listed here.
Client HF2 (6.9.5.9721) — 9-1-26
- Updated 7-Zip to 26.2
- Updated .NET Core to 10.0.11
- Updated the FlexApp filter driver to the 2024 GA version for improved performance and stability
- Resolved an issue where new files and folders could not be created in a FlexApp package's protected directories even though the granted permissions were applied
- Resolved an issue where a failed AD group enumeration left an incomplete cache that persisted until the cache was cleared or a full enumeration succeeded
- Resolved an issue where a Drive Mapping rule failed before the credentials defined in the rule were applied when the user lacked access to the target path
- Resolved an issue where Application Restriction rules did not match folder names beginning with a dot
- Resolved an issue where Application Restriction policies were skipped when an installer candidate failed elevation
- Resolved an issue where Application Restriction candidates were re-hashed for every hash rule, delaying enforcement on large or UNC binaries; the candidate is now hashed once
- Resolved an issue where a user could open and edit their own Application Restriction policy (.pol) file
- Removed default whitelist hashes for legacy tools that are no longer shipped and updated the stale
rsync.exehash - Resolved an issue where an upgrade run as SYSTEM reported success but did not install when an existing
LwL.ProfileUnity.Client.Startup.Update.exe.configremained inC:\Windows\Temp
Client HF1 (6.9.5.9678) SUPERSEDED BY HF2
▼ Show
Superseded by HF2, which is cumulative and includes every fix listed here.
Client HF1 (6.9.5.9678) — 7-2-26
- Updated 7-Zip to 26.1
- Resolved an issue where SID-scoped cache tokens weren't matched by suffix at logoff, leaving FileCache token files uncleaned
- Resolved an issue where app modules called by triggers could run their logoff more than once
- Resolved an issue where an incomplete AD group list could be cached and used by Filters
- Resolved an issue where Application Restrictions generated spurious policy directory notifications during staging file promotion
- Resolved an issue where Application Restrictions policy mode incorrectly switched from blacklist to whitelist when the default whitelist rules were the only Allow rules present
- Resolved an issue where client failed to remove duplicate entries for Application Restriction policies with escaped special characters
- Resolved an issue where running startup/update exe as SYSTEM user wiped the
C:\Windows\Tempfolder - Resolved an issue with FlexApp Shortcut Validation vs. CAP Playback timing
- Resolved an issue where CmdService stopped firing
- Resolved an issue where a license check was performed during engine deactivation of FlexApp One packages
ProfileUnity & FlexApp Management Console — 6.9.5
| Console HF4 (6.9.5.9783) Updated 10-19-26 | |
| Download |
ProfileUnityConsole_6.9.5-HF4.zip ChecksumsMD5
4aec2236b9f98709aab57daa21a3dbe0SHA256
eaa0bde703ae653aff4de89782d4d774271dcf08b77769e41e6d0e489d80fb69
NOTE: Review the README.txt for full installation details.
|
| Fixes & Changes |
|
| Prerequisite: This hot fix applies only to Console 6.9.5. If your Console is not yet running 6.9.5, upgrade to that release before applying this hot fix. | |
Console HF3 (6.9.5.9750) SUPERSEDED BY HF4
▼ Show
Superseded by HF4, which is cumulative and includes every fix listed here.
Console HF3 (6.9.5.9750) — 9-15-26
- Fixed an issue where Console logon failed permanently for a user whose Active Directory group membership contained a single entry that could not be resolved
- Fixed an issue where the Domain Admins check matched any group identifier beginning with 512, which could sign ordinary Active Directory users in as Console administrators
- Fixed an issue where a logon denied because the user is not in an authorized group was logged as an unexpected error with a stack trace and returned no diagnostic code
Console HF2 (6.9.5.9721) SUPERSEDED BY HF3
▼ Show
Superseded by HF3, which is cumulative and includes every fix listed here.
Console HF2 (6.9.5.9721) — 8-14-26
- Updated 7-Zip to 26.0.2
- Updated MailKit, MimeKit and SharpCompress to address reported security vulnerabilities
- Updated Microsoft.OpenApi in the Console and License Server to address a reported security vulnerability
- Updated chart.js and moment.js to address reported security vulnerabilities
- Fixed an issue where Console logon failed for users with an alternate UPN suffix, including lookups across trusted forests
- Fixed an issue with logon resolution and domain stamping in large and multi-domain Active Directory environments
- Fixed an issue where AD domains were enumerated on every Console load; domains are now enumerated at service startup and served from a cached list, and the list still completes when a subdomain is unreachable
- Fixed an issue where adding a node to a cluster returned a 500 error on the added node's Console
- Fixed an issue where "Go to Stand-Alone" returned a node to standalone mode without removing it from the remaining cluster nodes
- Fixed an issue where Secure Banner text was displayed as plain text instead of HTML
- Fixed an issue where saving a Configuration with an App-V rule Action of "Remove All" returned an error and the Configuration was not saved
- Fixed an issue where
ProcessUtil.RetryProcess task create process returnedentries were not formatted correctly in the log
Console HF1 (6.9.5.9678) SUPERSEDED BY HF2
▼ Show
Superseded by HF2, which is cumulative and includes every fix listed here.
Console HF1 (6.9.5.9678) — 7-2-26
- Updated 7-Zip to 26.1
- Fixed an issue where CAC messages filled the ProU log when Debug is enabled
- Fixed an issue where Configuration PDF export was missing rule filter fields for User Defined Scripts
- Fixed an issue where Administrative Templates "Update ADM files" did not work
- Fixed an issue where larger configurations with retention would get a document size error
FlexApp Packaging Console — 6.9.5
| FPC (6.9.5.9783) Updated 10-19-26 | |
| Download |
FlexAppOnePackagingConsole_6.9.5.9783.exe ChecksumsMD5
4747245dffabdd7b72a6bc94f4ff77b7SHA256
1497726260bbb50b9ba189096d26357c4fa828308f8cbbb9fdb66f7c5ecae48c
|
| Fixes & Changes |
|
FPC (6.9.5.9750) SUPERSEDED BY 6.9.5.9783
▼ Show
Superseded by 6.9.5.9783, which is cumulative and includes every fix listed here.
FPC (6.9.5.9750) — 9-15-26
- Resolved an issue where a FlexApp package created against cloud storage was written in a corrupt state and could not be mounted or reopened for editing; file-share-stored packages were unaffected
- Resolved an issue where a package's icon set could fall out of alignment with its shortcut list, leaving Click-to-Layer shortcuts with a blank or incorrect icon
FPC (6.9.5.9721) SUPERSEDED BY 6.9.5.9750
▼ Show
Superseded by 6.9.5.9750, which is cumulative and includes every fix listed here.
FPC (6.9.5.9721) — 9-1-26
- Resolved an issue where a FlexApp package written to a cloud location lost its
.fa1companion file — the child disk merge and cloud upload path stripped the.fa1from the uploaded package, affecting the create, clone, import, and extend workflows
FPC (6.9.5.9678) SUPERSEDED BY 6.9.5.9721
▼ Show
Superseded by 6.9.5.9721, which resolves the known issue below.
FPC (6.9.5.9678) — 7-2-26
FlexApp One — 6.9.5
| FAO (6.9.5.9783) Updated 10-19-26 | |
| Download |
FlexAppOneBundler_6.9.5.9783.zip ChecksumsMD5
23db42bc35a6190cb7bb5b08f8c35747SHA256
d97037fcd20cad66956a30f1dd491b78e799a88d0fe3b4b7bc8cd9d3265f152e
|
| Fixes & Changes |
|
FAO (6.9.5.9678) SUPERSEDED BY 6.9.5.9721
▼ Show
Superseded by 6.9.5.9721, which is cumulative and includes every fix listed here.
FAO (6.9.5.9678) — 7-2-26
- Resolved an issue where a license check was performed during the deactivation of FlexApp One engines
FlexApp Packaging Automation — 6.9.5
| FPA (6.9.5.9783) Updated 10-19-26 | |
| Download |
ChecksumsMD5
e530f3d72c8956e9827fc821fed3b719SHA256
4906fb3c67380a6d600d8ba3e8e2f0878ab8d6b1b9e4927a57567ff48472db1e
|
| Fixes & Changes |
|
Older Releases
6.8.7 R2 (6.8.7.9216) EXTENDED SUPPORT
▼ Show
Client Tools — Updated 9-18-25
client-tools_687-r2-hf4.zip | README.txt
R2 Client HF4 (6.8.7.9390) — 9-18-25
- Updated .NET Core to 8.0.20
- Updated 7-Zip to 25.01
- Added support for Windows 11 25H2 (10-7-25)
- Resolved an issue where ProfileDisk users may receive a temporary profile on persistent machines that are not regularly rebooted
R2 Client HF3 (6.8.7.9343) — 7-31-25
- Updated .NET Core to 8.0.18
- Updated 7-Zip to 25.00
- Added configurable retries to FlexApp module when attempting to read remote package XML files
R2 Client HF2 (6.8.7.9309) — 6-27-25
- Updated .NET Core to 8.0.17
- Added support for Omnissa Horizon 8 2412 (8.14) and 2503 ESB (8.15)
- Added support in FlexApp for capturing Black Ice ColorPlus and other printers with multiple, custom port names
- Resolved an issue with hung login.microsoftonline.com calls
- Resolved an issue in R2 HF1 with the default value for OfflineTestDnsEntry, now set to
%LOGONSERVER% - Resolved an issue with AD group Filter and offline logins caching incomplete AD group token
- Resolved an issue with AppData entries for on-boot, cloaked FlexApp assignments only replaying for the first user to login
- Resolved an issue reversing some FlexApp packages with Fonts that was preventing subsequent playbacks in persistent scenarios
R2 Client HF1 (6.8.7.9256) — 5-5-25
- Updated .NET Core to 8.0.16
- Updated FlexApp Filter Drivers (2024)
- Updated AppStream 2.0 Pre-warm Manifest for early EBS volume block hydration
- Resolved an issue where anti-virus scanning FlexApp paths can cause excess memory usage
- Resolved an issue relating to multi-threading FlexApp playbacks
- Resolved an issue bulk mounting FlexApp packages now allowing for faster mount times
- Resolved an issue handling malformed Entra ID Filter information that prevented Client from running
- Resolved an issue where Windows only returns a subset of an AD user's group memberships if the machine is offline and rebooted
- Added
VirtFsService.dll.configFlexApp settingProcessShortPaths— set toFalseto disable legacy 8.3 DOS paths for improved I/O efficiency
Lwl.ProfileUnity.Client.exe.config via OfflineTestDnsEntry. If using a laptop, set a DNS name resolvable only when on VPN, such as a Domain Controller.Management Console — Updated 9-18-25
ProfileUnityConsole_6.8.7R2-HF2.zip | README.txt
R2 Console HF2 (6.8.7.9390) — 9-18-25
- Updates ProfileUnity Management Console to 6.8.7.9390 (9-16-25)
- Updated 7-Zip to 25.01
- Added new
ProfileUnity.Host.exe.configoptionGetForestChildren— whenfalse, disables gathering child Domain information from other AD Forests. Enable if not seeing all Domains.
R2 Console HF1 (6.8.7.9320) — 7-8-25
- Improved reliability of Active Directory-related communications
- Fixed an issue in 6.8.7.9216 (R2) preventing AVD App Attach sync process from completing
6.8.7 R1 (6.8.7.9083) EXTENDED SUPPORT
▼ Show
Client Tools — Updated 1-15-25
client-tools_687-hf3.zip | README.txt
R1 Client HF3 (6.8.7.9146) — 1-15-25
- Resolved an issue in 6.8.7 affecting the execution of Shortcut Cleanup and AppV Module
- Updated .NET Core to 8.0.12
R1 Client HF2 (6.8.7.9138) — 1-7-25
- Resolved an issue with certain combinations of filter conditions
R1 Client HF1 (6.8.7.9106) — 12-19-24
- Updated .NET Core to 8.0.11
- Resolved an issue processing Entra ID group filters — Also requires ProfileUnity Console 6.8.7 R1 HF1 or later
Management Console — Updated 1-7-25
ProfileUnityConsole_6.8.7-HF1.zip | README.txt
R1 Console HF1 (6.8.7.9112) — 1-7-25
- Fixed an issue logging into 6.8.7 with certain complex passwords
- Fixed an issue preventing the mixing of Entra ID group filters with different Tenant IDs in a single Configuration Module
- Fixed an issue creating new Entra ID group filters
6.8.6 GA & R1 (6.8.6.8711 / 6.8.6.8805) LIMITED SUPPORT
▼ Show
Client Tools — Updated 5-24-24
client-tools_686r1-hf3.zip | README.txt
R1 Client HF3 (6.8.6.8906) — 5-20-24
- Resolved an issue with missing FlexApps during simultaneous user logons with matching assignments
- Updated .NET Core Hosting Bundle and Desktop Runtimes to 6.0.30
R1 Client HF2 (6.8.6.8872) — 4-22-24
- Resolved an issue where an RDS/AVD user may not see any FlexApp shortcuts
- Resolved an issue where some FlexApp Ones, on the second logon, cause Winlogon to hang, instantly sign out, or ask to start the LW Container Service
R1 Client HF1 (6.8.6.8838) — 3-15-24
- Resolved an issue with Azure Security Group lookup failures causing delays
- Resolved an issue in 6.8.6 R1 processing INI paths containing environment variables
- Resolved an issue in 6.8.6 R1 reading prior versions' Azure Security Group info from INI
- Resolved an issue in 6.8.6 R1 affecting offline processing of previously-cached INI files
6.8.5 GA & R1 (6.8.5.8490 / 6.8.5.8507) EOL
▼ Show
Client Tools — Updated 8-15-23
client-tools_685r1-hf7.zip | README.txt — HF7 through HF1 fixes on file; refer to the archived README for full details.
6.8.4 and Earlier EOL
▼ Show
Version history covered: 6.8.4 R2, 6.8.4 G4/R1, 6.8.3 R2/R1, 6.8.2.
End of Life Versions
For a complete list of ProfileUnity versions at End of Life, including support end dates: › End-of-Life for Versions of ProfileUnity
| Product | Liquidware ProfileUnity with FlexApp |
| Applies To | ProfileUnity 6.8.4 R2 and later |
| Updated | November 3, 2026 |