January Windows updates may fail if Citrix SRA is installed

January 2025 Windows Updates and Citrix SRA Issues

On January 14, 2025, Microsoft released the latest security updates for Windows 10 and Windows 11, which include several important fixes and some notable issues, particularly related to Citrix Session Recording Agent (SRA).

Key Updates

Security Fixes

The January 2025 updates for both Windows 10 and Windows 11 primarily focus on addressing security issues. Here are some key highlights:

• Windows 10 (KB5049981, KB5050008, KB5049993, KB5050013):

  • These updates bump the OS builds to 19044.5371 and 19045.5371 for the supported versions (20H2, 21H2, and 22H2)23.
  • The updates include security patches and an updated Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b) to prevent vulnerable kernel drivers from being loaded3.

• Windows 11 (KB5050009, KB5050021):

  • This update applies to Windows 11 version 24H2 and includes security improvements, as well as an updated Windows Kernel Vulnerable Driver Blocklist file15.

Citrix SRA Installation Issues

A significant issue has been identified with devices that have certain Citrix components installed, specifically the Citrix Session Recording Agent (SRA) version 2411, which was released in December 2024.

• Installation Failure:

  • Devices with Citrix SRA version 2411 may be unable to complete the installation of the January 2025 Windows security update. The update may download and apply correctly, but upon restarting the device, an error message appears, and the device reverts to the previous updates125.

• Workaround:

  • Citrix has documented this issue and provided a workaround that can be performed before installing the January 2025 Windows security update. Microsoft is working with Citrix to address this issue and will update the documentation once a resolution is available125.

Other Known Issues

OpenSSH Service Failure

• Some customers have reported that the OpenSSH (Open Secure Shell) service fails to start after the installation of the October 2024 security update, preventing SSH connections. This issue affects enterprise, IoT, and education customers, and Microsoft is investigating whether it also impacts consumer users. A temporary workaround involves updating permissions (ACLs) on the affected directories125.

Roblox on Arm Devices

• Players on Arm devices are unable to download and play Roblox via the Microsoft Store on Windows. However, they can play Roblox by downloading the title directly from the Roblox website15.

Additional Information

• Servicing Stack Updates:

  • Both Windows 10 and Windows 11 updates include servicing stack updates (SSU) to ensure a robust and reliable servicing stack for installing Microsoft updates15.

• Availability:

  • These updates are available via Windows Update and can also be downloaded from the Microsoft Update Catalog for offline installation25.

In summary, the January 2025 Windows updates address critical security issues but also introduce some compatibility problems with certain Citrix components. Users and IT administrators should be aware of these issues and follow the recommended workarounds until a permanent resolution is provided.

References:

• [Microsoft Support: January 14, 2025—KB5050009 (OS Build 26100.2894)]1
• [Neowin: Windows 10 (KB5049981 / KB5050008 / KB5049993 / KB5050013 ...)]2
• [BleepingComputer: Windows 10 KB5049981 update released with new BYOVD blocklist]3
• [Neowin: Windows 11 (KB5050009, KB5050021) January 2025 Patch ...]5