A new cumulative update (June 2023 CU) has been released for SharePoint Server 2019.
SP Build:
16.0.10399.20005 (Language independent CU)
16.0.10399.20005 (Language dependent CU)
SharePoint 2019 CU – KB articles describing the CU:
- KB 5002402 – June 2023 Update for SharePoint Server 2019 (language independent)
- KB 5002403 – June 2023 Update for SharePoint Server 2019 (language dependent)
SharePoint Server 2019 CU – CU download links:
- Download June 2023 Update for SharePoint Server 2019 (language independent)
- Download June 2023 Update for SharePoint Server 2019 (language dependent)
After installation, remember to run the SharePoint 2019 Products Configuration Wizard or the following command:
PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install
Important notes
Always install both packages in this order:
- language independent components (core CU)
- language-dependent components (language CU)
For language-dependent packages, the language you select does not matter because each package contains updates for all languages.
If you install a new language pack on a SharePoint Server 2019 farm, you must reinstall the language-dependent update afterwards.
Remember to keep Distributed Cache updated as well as SharePoint. See How to update Distributed Cache correctly (in Czech).
Note for this CU:
KB 5002402 and KB 5002403 require the release version of SharePoint Server 2019 to be installed.
Included fixes and improvements
The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.
SharePoint Server 2019
KB 5002402 and KB 5002403 address elevation of privilege, denial of service and spoofing vulnerabilities in SharePoint. The advisories are CVE-2023-29357, CVE-2023-33129, CVE-2023-33130, CVE-2023-33132, CVE-2023-33142.
The language-independent package KB 5002402 includes these SharePoint Server 2019 fixes:
-
Fixes an issue where property demotion fails for ink-enabled
.docxdocuments. -
Fixes an issue where new pages in the Site Pages library always use the default content type.
-
Fixes an issue where adding forms-based authentication prevents
Viewlsts.aspxfrom opening correctly.
The following fixes require both the language-dependent package KB 5002403 and the language-independent package KB 5002402:
-
Fixes an issue where a modern page created in a Site Pages subfolder is saved to the library root instead.
-
Fixes an issue where selecting a resolved user in a
PersonWithoutPresencefield briefly displays No Results instead of immediately filling the field. -
Fixes an issue where Document ID is missing from each document’s property information section.
-
Fixes an issue where images with the
.svgextension cannot be opened or previewed on the document library page.
Komentáře