Fixed issues
UniconOS Management 2609 (formerly Scout 15)
Release date 2026-10-13
Fixed issues
Device grid, views & UI
- An OU could not be chosen when using multiple filters. [SBD-2204]
- Dynamic Device Groups were not displayed in Scout Board. [SBD-2205]
- OU filters did not work correctly. [SBD-2208]
- Applying a saved or Default view removed the drag handle and could remove the row checkbox. [SBD-2232]
- The Manage-administrators list overflowed the page when long. [SBD-2264]
- The device table stopped updating live. [SBD-2310]
- Devices that onboarded while an administrator was signed in stayed invisible in their OU and were counted as “hidden devices”. [SBD-2402]
- The Execute-action dialog showed the wrong state when switching actions. [SBD-2428]
- Move dialogs collapsed the OU tree shortly after opening, so nothing could be moved into a nested OU. [SBD-2456]
- Overwriting a saved view could create a second view with the same name instead of replacing it. [SBD-2457]
- The device list could not be sorted by device ID. [SBD-2405]
Configuration correctness
- Comparing settings/settings match issues. [SBD-2197] [SBD-2223] [SBD-2234] [SBD-2245]
- The Citrix default for Key Passthrough Escape Shift was not loaded and Escape Char showed the wrong value. [SBD-2278]
- Replacing or deleting an application icon in Scout Board does not reach a devices. [SBD-2279]
- App icons were embedded once per application in the device configuration instead of once per icon. [SBD-2281]
- Environment variables set via a Configuration Label could not be encrypted. [SBD-2336]
- An application free parameter without a value hung the configuration build. [SCOUT-2410]
- ScoutServer sent no config reply when a Setup had no ScreenSettings row, so the device booted with no apps. [SCOUT-2333]
Rights and admin management
- A permission denial logged the admin out instead of showing a “not permitted” message. [SBD-2196]
- When merging AD group rights, OU and device entries were incorrectly combined in certain scenarios. [SBD-2468]
Audit logging
- An OU-filter modify/delete recorded a successful Monitor audit row even when the row was already gone. [SBD-2443]
- Audit rows recorded the percent-escaped URL segment as the object name, so a deleted label or rule was logged incorrect. [SBD-2451]
ScoutServer stability & database resilience
- An OU delete walked the entire device fleet inside a single transaction. [SBD-1742]
- ScoutServer crash/deadlock issue and crash handling. [SCOUT-2310] [SCOUT-2334] [SCOUT-2372] [SCOUT-2396] [SCOUT-2838] [SCOUT-3572] [SCOUT-2578]
- On a classic AlwaysOn AG, group_id was unreadable on SQL 2022 / ODBC Driver 18, so ScoutServer lost its license after a failover. [SCOUT-2390]
- Scout Board could not recover from a DBLayer timeout without a service restart. [SBD-2353]
- Scout Board showed “Scout Server is not responding” while the ScoutServer process was healthy. [SCOUT-2607]
Device status & lifecycle
- Duplicate device rows were created on every reboot when a ClientIdentifier had more than one row. [SCOUT-2151]
- A device stayed “Updating” in Scout Board after an update finished because the UpdateDevice row was never closed. [SCOUT-2872]
- Asset tags could never be retracted or corrected — Scout kept a stale/placeholder chassis tag indefinitely. [SCOUT-3249]
OU import/export & configuration import
- Advanced device configuration import failed. [SBD-2100]
- OU import created OUs without the device-visibility flag, leaving imported OUs hidden from onboarding. [SBD-2164]
- OU config import did not apply keyboard, mouse settings. [SBD-2406]
- A duplicate OU name aborted the import instead of skipping that OU. [SBD-2448]
- OU import wrote the first scheduler job and silently discarded the rest. [SCOUT-3220]
Security hardening
- Request handlers SQL injection, path traversal, permission checks. [SBD-2024] [SBD-2248] [SBD-2252] [SBD-2255] [SBD-2256] [SBD-2259] [SBD-2261] [SCOUT-2112] [SCOUT-2415] [SCOUT-2426] [SCOUT-2436] [SCOUT-2568] [SCOUT-3250] [SCOUT-3569]
- Public REST API Endpoints returned HTTP 500. [SBD-2134] [SBD-2136] [SBD-2137] [SBD-2139] [SBD-2178] [SBD-2414]
- Public REST API Endpoints returned HTTP 400. [SBD-2433] [SBD-2435] [SBD-2489]
UniconOS 2609 (formerly eLux 7)
Release date 2026-10-13
Fixed issues
Authentication, Imprivata & smart card
- UniconOS Imprivata failed to verify CA-signed server certificates; only self-signed certificates worked. [ELUX-7286]
- Smart-card login overwrote the configured Kerberos default realm with the certificate UPN suffix. [ELUX-7922]
- Imprivata EPM caused a 25-second delay before the AD password-change dialog appeared. [ELUX-7925]
- Imprivata tap-out did not disconnect the CWA session when closeOnLock=true. [ELUX-8041]
- Imprivata service jumped to the full offline retry interval on the first failure, turning a one-second transient into a five-minute outage. [ELUX-8181]
- An Imprivata slash card caused an empty desktop and a dialog double-free crash. [ELUX-7011]
- The Imprivata badge-enrollment dialog did not honor the default domain. [ELUX-9635]
- The Imprivata AD default domain configured in Scout Board was not written to terminal.ini. [ELUX-6976]
- The Imprivata PIN-change option was shown to users who had not set up a PIN. [ELUX-5031]
- Logging in with user name and password prompted an unwanted Imprivata PIN enrollment. [ELUX-5980]
- The %HOSTNAME% macro was not expanded for Imprivata fast-user-switching credential injection. [ELUX-8034]
- Multiple VDI desktop launches were inconsistent, and fast user switching to a different policy broke the UniconOS UI. [ELUX-7348]
- A PureAuth unlock-failed screen appeared when PureAuthLogin=true was missing. [ELUX-7530]
Display, monitors & graphics
- Monitor layout and primary-monitor settings were lost after a reboot. [ELUX-7186]
- Windows moved between displays after the display layout was changed. [ELUX-7160]
- Monitor rearrangement was not saved on the Dell OptiPlex 7020. [ELUX-7220]
- The NVIDIA display driver caused a black screen on all NVIDIA outputs. [ELUX-8054]
- The screensaver caused graphics to hang on some NVIDIA devices. [ELUX-7273]
- The screensaver crashed. [ELUX-7135]
- Icons were broken. [ELUX-7350]
- A monitor node was missing from the layout, causing cursor-movement issues. [ELUX-7552]
- Three external-monitor rotation issues appeared randomly. [ELUX-7158]
- The Display section monitor tiles were too large. [ELUX-8392]
- Self-Service dialog became unresponsive for a long time when the monitor layout changed before login. [ELUX-7271]
- Device configuration submenus overlapped the parent menu and did not flip to the side with free space. [ELUX-7430]
Audio, peripherals & collaboration apps
- The “Test Speaker” button did not play any sound on some devices. [ELUX-7147]
- Volume extended keys did not work on the Dell OptiPlex 3000. [ELUX-7131]
- Multimedia keys still worked even when “Extended Keys” was disabled. [ELUX-7380]
- An active USB drive was not displayed in the RDP session. [ELUX-7495]
- The Zoom app could not be reopened after being closed with the X button. [ELUX-6302]
- Microsoft Teams could not be opened. [ELUX-7317]
- AWS Connect calls were dropped. [ELUX-6959]
Printing
- Auto-discovered printers failed to print. [ELUX-7528]
Networking, VPN & proxy
- Global network proxy authentication settings were not applied to web browsers. [ELUX-5663]
- DNS failed and SCEP did not work over a Cisco VPN connection. [ELUX-7489]
- UniconOS could not reach UniconOS Management server during shutdown when a VPN was active. [ELUX-5902]
- The Cisco Secure Client caused high CPU load. [ELUX-8090]
- A single click on the Network icon (wired/LAN) disconnected the network, with no way to make the toggle configurable. [ELUX-8389]
- Writing DisableConnectivityCheck=true in terminal.ini sometimes had no effect. [ELUX-6519]
- NetworkAccessControl ignored TPM2Fallback when TPM key generation failed. [ELUX-6920]
- The 802.1x profile was not configured when the SCEP WPA configuration changed. [ELUX-7532]
Device management
- A device switched to the “unmanaged” status when configuration processing timed out. [ELUX-7820]
- Applying a configuration could terminate a running application. [ELUX-8297]
- Scout Cloud Gateway changes were not logged correctly. [ELUX-7576]
- The mirror session bar no longer showed the UniconOS Management admin name. [ELUX-8068]
- Advanced file entries were not cleaned up on configuration changes. [ELUX-8368]
- The virtual keyboard enable/disable setting configured in Scout Board was not written to terminal.ini. [ELUX-6977]
- The settings for the design and layout of the virtual keyboard did not work reliably in all scenarios. [ELUX-8108]
- User variables were not set successfully from user attributes. [ELUX-6871]
- Screen mirroring via mirror invitation failed because the VNC server rejected webrtcify’s local (127.0.0.1) connection. [ELUX-7145]
- Self-Service did not reset StoreFront/CWA state when the authenticated UniconOS user changed. [ELUX-7008]
Boot, shutdown & session stability
- Reboot did not complete, blocking shutdown for up to 30 minutes. [ELUX-7401]
- The TPM lock reset retry loop added about 30 seconds to every boot. [ELUX-7231]
- A notification pop-up could remain on screen indefinitely. [ELUX-6587]
- Logging off a locked UniconOS user required the user’s password. [ELUX-8362]
- In some scenarios, idle power actions were triggered too late. [ELUX-7252]
Firmware & updates
- The “firmware update running” popup was shown even when no firmware update was needed. [ELUX-6136]
- An extra firmware-update dialog appeared after clicking “perform later”. [ELUX-7926]
- The AuthVR5 cache caused firmware-update failures. [ELUX-8048]
- Firmware updates did not distinguish between local and UniconOS-triggered updates correctly. [ELUX-6446]
Migration (igel2UniconOS)
- igel2UniconOS migration did not work on LG AIO CN devices. [ELUX-7600]
- igel2UniconOS migration failed to migrate Lenovo endpoints with an EFI-partition “device or resource busy” error. [ELUX-9574]
- igel2UniconOS migration continued even when the downloaded archive was not a valid ZIP file. [ELUX-7467]
StoreFront & browser sessions
- A published resource without an icon aborted StoreFront resource parsing. [ELUX-7493]
- The store-add timeout (120s) was too short for NetScaler Gateway MFA and was not configurable. [ELUX-8002]
- On captive portals, duplicate browser windows and a spurious smart-card prompt appeared. [ELUX-7917]
- Citrix Workspace failed to enumerate. [ELUX-9580]
- The Omnissa Horizon Client could not copy its configuration on a read-only root filesystem. [ELUX-7218]
- The native WebKitGTK Caps Lock indicator was shown in built-in browser web content. [ELUX-7428]
Security hardening
- The boot shim is dual-signed with both the Microsoft 2011 and 2023 UEFI CA signatures. [ELUX-6700]
- libidm was updated to parse the OpenSSL 3.5.5. [ELUX-8177]
- The Linux kernel was updated to 6.18.48 to pull in a batch of serious security fixes. [ELUX-8150]
- FreeRDP was updated to 2.6.1 (fixes CVE-2026-45700). [ELUX-7553]
- OpenVPN was updated to 2.5.11-0ubuntu0.22.04.4 (fixes CVE-2026-12932, CVE-2026-12996 and CVE-2026-13698). [ELUX-7556]
- OpenVPN was updated to 2.5.11 (fixes CVE-2026-35058 and CVE-2026-40215). [ELUX-6232]
- CUPS was updated to 2.4.1 (fixes CVE-2025-58436, CVE-2025-61915, CVE-2025-58060 and CVE-2025-58364). [ELUX-5342]
- alsa-lib was updated to 1.2.11. [ELUX-7555]
- Security updates for alsa-lib due to the critical vulnerability CVE-2026-56109.
- Security updates for cifs-utils due to the critical vulnerability CVE-2026-12505.
- Security updates for curl due to the critical vulnerabilities CVE-2026-8286, CVE-2026-8458, CVE-2026-8924–8925, CVE-2026-8927, CVE-2026-9547.
- Security updates for ffmpeg due to the critical vulnerability CVE-2026-40962.
- Security updates for glibc due to the critical vulnerabilities CVE-2026-4046, CVE-2026-5435, CVE-2026-5450, CVE-2026-5928, CVE-2026-6238.
- Security updates for graphite2 due to the critical vulnerability CVE-2026-50593.
- Security updates for gst-plugins-good1.0 due to the critical vulnerabilities CVE-2026-39043–39044, CVE-2026-53705.
- Security updates for gzip due to the critical vulnerabilities CVE-2026-41991–41992.
- Security updates for jbig2dec due to the critical vulnerabilities CVE-2023-46361, CVE-2026-38076.
- Security updates for krb5 due to the critical vulnerabilities CVE-2026-11850, CVE-2026-40355–40356.
- Security updates for libarchive due to the critical vulnerabilities CVE-2026-5745, CVE-2026-14164.
- Security updates for libexif due to the critical vulnerabilities CVE-2026-32775, CVE-2026-40385–40386.
- Security updates for libgphoto2 due to the critical vulnerabilities CVE-2026-40333–40335, CVE-2026-40338–40341.
- Security updates for libidn due to the critical vulnerability CVE-2026-57053.
- Security updates for libinput due to the critical vulnerability CVE-2026-50292.
- Security updates for libnfs due to the critical vulnerability CVE-2026-53689.
- Security updates for librabbitmq due to the critical vulnerabilities CVE-2023-35789, CVE-2026-44235–44236.
- Security updates for libsoup2.4 due to the critical vulnerabilities CVE-2026-2369, CVE-2026-5119.
- Security updates for libxfont due to the critical vulnerabilities CVE-2026-56001–56003.
- Security updates for libxml2 due to the critical vulnerability CVE-2026-6653.
- Security updates for libxpm due to the critical vulnerability CVE-2026-4367.
- Security updates for mailcap due to the critical vulnerability CVE-2026-10037.
- Security updates for ncurses due to the critical vulnerability CVE-2025-69720.
- Security updates for nghttp2 due to the critical vulnerability CVE-2026-58055.
- Security updates for nss due to the critical vulnerability CVE-2026-12318.
- Security updates for ntfs-3g due to the critical vulnerabilities CVE-2026-42616–42618, CVE-2026-46569–46572, CVE-2026-56135–56136.
- Security updates for openssh due to the critical vulnerabilities CVE-2026-59995–60002.
- Security updates for openssl due to the critical vulnerabilities CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34182, CVE-2026-42766–42767, CVE-2026-42770, CVE-2026-45445–45447.
- Security updates for pam due to the critical vulnerability CVE-2026-54411.
- Security updates for perl due to the critical vulnerabilities CVE-2026-8376, CVE-2026-42496.
- Security updates for poppler due to the critical vulnerability CVE-2026-10118.
- Security updates for python3.10 due to the critical vulnerabilities CVE-2025-13462, CVE-2025-69534, CVE-2026-1299, CVE-2026-1502, CVE-2026-2297, CVE-2026-3276, CVE-2026-3644, CVE-2026-4224, CVE-2026-4519, CVE-2026-4786, CVE-2026-6019, CVE-2026-6100, CVE-2026-8328, CVE-2026-9669.
- Security updates for qtdeclarative-opensource-src due to the critical vulnerability CVE-2025-12385.
- Security updates for qtsvg-opensource-src due to the critical vulnerability CVE-2023-32573.
- Security updates for qtwebengine-opensource-src due to the critical vulnerability CVE-2025-9900.
- Security updates for samba due to the critical vulnerabilities CVE-2026-6949, CVE-2026-15779, CVE-2026-58216, CVE-2026-58218, CVE-2026-58221–58222, CVE-2026-58224.
- Security updates for sqlite3 due to the critical vulnerabilities CVE-2026-11822, CVE-2026-11824, CVE-2026-50812–50813.
- Security updates for squid due to the critical vulnerabilities CVE-2025-59362, CVE-2025-62168, CVE-2026-32748, CVE-2026-33515, CVE-2026-33526, CVE-2026-47729, CVE-2026-50012.
- Security updates for systemd due to the critical vulnerabilities CVE-2023-7008, CVE-2026-40226.
- Security updates for tar due to the critical vulnerabilities CVE-2025-45582, CVE-2026-5704.
- Security updates for uriparser due to the critical vulnerability CVE-2025-67899.
- Security updates for vim due to the critical vulnerabilities CVE-2026-35177, CVE-2026-43961, CVE-2026-46483, CVE-2026-47162, CVE-2026-47167, CVE-2026-52858–52860, CVE-2026-55693, CVE-2026-55892, CVE-2026-55895, CVE-2026-57452, CVE-2026-57455–57456, CVE-2026-59856–59858.
- Security updates for wget due to the critical vulnerabilities CVE-2026-15146, CVE-2026-58469–58472.
- Security updates for xz-utils due to the critical vulnerability CVE-2026-34743.
- Security updates for linux-kernel (6.18.38 → 6.18.48) due to 1783 CVEs.
Fixed issues
Copied!
Failed!