Updates for SharePoint Server 2019 (October 2025 CU)

19.10.2025    |    komentáře   komentářů: 0

A new cumulative update (October 2025 CU) has been released for SharePoint Server 2019.

SP Build:
16.0.10417.20059 (Language independent CU)
16.0.10417.20059 (Language dependent CU)

Important before installation:

If you are upgrading from the September 2025 CU to a newer update, remove the NT AUTHORITY\SYSTEM account from the local WSS_WPG and IIS_IUSRS groups on every SharePoint server in the farm before installation, if it is a member. Otherwise, installation of the update may fail.

SharePoint 2019 CU – KB articles describing the CU:

  • KB 5002796 – October 2025 Update for SharePoint Server 2019 (language independent)
  • KB 5002798 – October 2025 Update for SharePoint Server 2019 (language dependent)

SharePoint Server 2019 CU – CU download links:

After installation, remember to run the SharePoint 2019 Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

Always install both packages in this order:

  1. language independent components (core CU)
  2. language-dependent components (language CU)

For language-dependent packages, the language you select does not matter because each package contains updates for all languages.

If you install a new language pack on a SharePoint Server 2019 farm, you must reinstall the language-dependent update afterwards.

Remember to keep Distributed Cache updated as well as SharePoint. See How to update Distributed Cache correctly (in Czech).

Note for this CU:

For 2013-type workflows, install the August 2025 SharePoint Workflow Manager update before this CU.

Classic Workflow Manager requires the debug flag below. If workflows stop working, run these commands in SharePoint Management Shell to restore operation:

$farm = Get-SPFarm
$farm.ServerDebugFlags.Add(53601)
$farm.update()
iisreset

Configure the thresholds correctly to avoid blocking every matching request.

These updates require the release version of SharePoint Server 2019.

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server 2019

KB 5002796 addresses information disclosure in Microsoft Excel and remote code execution in Microsoft Word and Microsoft SharePoint: CVE-2025-59232, CVE-2025-59222, CVE-2025-59221, CVE-2025-59237, CVE-2025-59235, CVE-2025-59228.

KB 5002798 addresses information disclosure in Microsoft Excel and remote code execution in Microsoft Word: CVE-2025-59232, CVE-2025-59222, CVE-2025-59221, CVE-2025-59235.

Both KB 5002796 and KB 5002798 include this improvement:

  • Enables AMSI to inspect HTTP request bodies.

Komentáře