Updates for SharePoint Server 2019 (November 2025 CU)

16.11.2025    |    komentáře   komentářů: 0

A new cumulative update (November 2025 CU) has been released for SharePoint Server 2019.

SP Build:
16.0.10417.20068 (Language independent CU)

Important before installation:

If you are upgrading from the September 2025 CU to a newer update, remove the NT AUTHORITY\SYSTEM account from the local WSS_WPG and IIS_IUSRS groups on every SharePoint server in the farm before installation, if it is a member. Otherwise, installation of the update may fail.

SharePoint 2019 CU – KB articles describing the CU:

  • KB 5002803 – November 2025 Update for SharePoint Server 2019 (language independent)
  • No new language-dependent package was released for this CU. Use the latest available language CU: KB 5002798 (October 2025 CU).

SharePoint Server 2019 CU – CU download links:

After installation, remember to run the SharePoint 2019 Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

Always install both packages in this order:

  1. language independent components (core CU for this release)
  2. language-dependent components (latest available language CU: KB 5002798, October 2025 CU)

For language-dependent packages, the language you select does not matter because each package contains updates for all languages.

If you install a new language pack on a SharePoint Server 2019 farm, you must reinstall the language-dependent update afterwards.

Remember to keep Distributed Cache updated as well as SharePoint. See How to update Distributed Cache correctly (in Czech).

Note for this CU:

When using SharePoint Workflow Manager, install KB5002799 in the farm before this CU.

To keep Classic Workflow Manager working, enable its debug flag with these commands:

$farm = Get-SPFarm
$farm.ServerDebugFlags.Add(53601)
$farm.update()
iisreset

Installation requires the release version of SharePoint Server 2019.

Accessing sitedirectorysettings.aspx through another host can produce ULS event tag 4gab5: security restrictions now limit access to the current farm host. After verifying that the additional host is safe, a farm administrator can allow its domain through AdditionalValidSPFarmHosts:

add-pssnapin *
$f = get-spfarm
$f.AddGenericAllowedListValue("AdditionalValidSPFarmHosts", "your_additional_farm_host")
$f.update()
iisreset

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server 2019

KB 5002803 addresses the SharePoint remote code execution vulnerability CVE-2025-62204.

The language-independent package KB 5002803 includes these nonsecurity changes:

  • Fixes an issue with China’s GB18030-2022 certification.

  • Adds a requirement to select a library for audit logs before proceeding.

Komentáře