Updates for SharePoint Server 2019 (March 2023 CU)

19.3.2023    |    komentáře   komentářů: 0

A new cumulative update (March 2023 CU) has been released for SharePoint Server 2019.

SP Build:
16.0.10396.20000 (Language independent CU)
16.0.10396.20000 (Language dependent CU)

SharePoint 2019 CU – KB articles describing the CU:

  • KB 5002358 – March 2023 Update for SharePoint Server 2019 (language independent)
  • KB 5002357 – March 2023 Update for SharePoint Server 2019 (language dependent)

SharePoint Server 2019 CU – CU download links:

After installation, remember to run the SharePoint 2019 Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

Always install both packages in this order:

  1. language independent components (core CU)
  2. language-dependent components (language CU)

For language-dependent packages, the language you select does not matter because each package contains updates for all languages.

If you install a new language pack on a SharePoint Server 2019 farm, you must reinstall the language-dependent update afterwards.

Remember to keep Distributed Cache updated as well as SharePoint. See How to update Distributed Cache correctly (in Czech).

Note for this CU:

KB 5002358 requires the release version of SharePoint Server 2019 to be installed.

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server 2019

KB 5002358 addresses spoofing in SharePoint Server, documented in CVE-2023-23395.

The language-independent package KB 5002358 includes these SharePoint Server 2019 fixes:

  • Fixes an issue where permissions are handled incorrectly by New-SPSite.

  • Fixes an issue where using Try Link applies unexpected HTML encoding to the link.

The following improvement and fixes require both the language-dependent package KB 5002357 and the language-independent package KB 5002358:

  • Adds Windows Antimalware Scan Interface (AMSI) integration to SharePoint Server 2019 so that an AMSI-capable antimalware provider can block malicious requests before they reach SharePoint endpoints, including attempts to exploit vulnerabilities before their fixes are installed. For this March release, enable the feature for each web application in Central Administration through Application Management → Manage web applications → Manage Features → SharePoint Server Antimalware Scanning → Activate. The prerequisites include Windows Server 2016 or later, SharePoint Server 2019 build 16.0.10396.20000 or later, and Microsoft Defender engine 1.1.18300.4 or later, or another compatible AMSI provider. See Configure AMSI integration with SharePoint Server.

  • Fixes an issue where a Modern UI list item cannot be saved after its existing Person field value stops resolving in Active Directory Domain Services (AD DS).

  • Fixes an issue where Google Chrome cannot open Office documents from search results in Office client applications.

  • Fixes an issue where numbers formatted for German (Switzerland) are not recognized.

  • Fixes an issue where Mozilla Firefox cannot open SharePoint Office documents in Office client applications.

  • Fixes an issue where the DateTime filter fails for a lookup field with a non-U.S. regional setting.

  • Fixes an issue where the News property pane presents the News text without a heading tag.

  • Fixes an issue where custom JSON formatting in the Modern UI fails to load icon files from a local path.

Komentáře