Updates for SharePoint Server Subscription Edition (January 2025 CU)

A new cumulative update (January 2025 CU) has been released for SharePoint Server Subscription Edition.

SP Build:
16.0.17928.20356

Starting with the March 2023 CU, updates for SharePoint Server Subscription Edition are released as a single package (known as an Uber package) containing both language-independent and language-dependent fixes. Only one package needs to be installed to fully update the server.

SharePoint Subscription Edition CU – KB articles describing the CU:

  • KB 5002676 – January 2025 Update for SharePoint Server Subscription Edition

SharePoint Server Subscription Edition CU – CU download links:

After installation, remember to run the SharePoint Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

To speed up CU installation, I recommend following the guidance in How to speed up CU installation in SharePoint Server Subscription Edition.

The language you select when downloading the update does not matter because the same package is downloaded for every language.

Note for this CU:

Installing this update requires the release version of SharePoint Server Subscription Edition.

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server Subscription Edition

This CU addresses remote code execution and spoofing vulnerabilities: CVE-2025-21344, CVE-2025-21348, CVE-2025-21393.

The unified update in KB 5002676 includes these SharePoint Server Subscription Edition changes:

  • Adds a User-Agent header to hybrid search requests sent to Search Content Service (SCS).

  • Fixes an issue where an incorrect translation exposes a search box for unsupported moves between site collections.

  • Fixes an issue where CSOM’s ExportDocumentSet method fails with an exception from the type initializer for MS.Utility.EventTrace.

  • Fixes an issue where Import-SPWeb fails for a site originally created in Microsoft SharePoint 2007.

  • Fixes an issue where search scope breadcrumb navigation stops working on the search results page.

  • Fixes an issue where Quick Chart ignores changes to data in its source list.

  • Fixes an issue where NodeRunner.exe stops responding during a search operation.


Comments are closed.