Updates for SharePoint Server 2019 (August 2023 CU)

13.8.2023    |    komentáře   komentářů: 0

A new cumulative update (August 2023 CU) has been released for SharePoint Server 2019.

SP Build:
16.0.10401.20025 (Language independent CU)
16.0.10401.20025 (Language dependent CU)

SharePoint 2019 CU – KB articles describing the CU:

  • KB 5002436 – August 2023 Update for SharePoint Server 2019 (language independent)
  • KB 5002422 – August 2023 Update for SharePoint Server 2019 (language dependent)

SharePoint Server 2019 CU – CU download links:

After installation, remember to run the SharePoint 2019 Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

Always install both packages in this order:

  1. language independent components (core CU)
  2. language-dependent components (language CU)

For language-dependent packages, the language you select does not matter because each package contains updates for all languages.

If you install a new language pack on a SharePoint Server 2019 farm, you must reinstall the language-dependent update afterwards.

Remember to keep Distributed Cache updated as well as SharePoint. See How to update Distributed Cache correctly (in Czech).

Note for this CU:

KB 5002436 and KB 5002422 require the release version of SharePoint Server 2019 to be installed.

After KB 5002436 or KB 5002422 is installed, a web part or web form control may fail to display on a web part page. See KB5029605.

The problem occurs when DataFormParameter uses an unsafe property name unsupported by the web part. ULS logs show event tag 6ipo0 and Found an unsafe PropertyName: <UnsafePropertyName>. A farm administrator can work around it by adding the affected property name to WebPartSupportedSimplePropertyNames with the following commands, substituting that name for <UnsafePropertyName>:

add-pssnapin *
$f=get-spfarm
$f.AddGenericAllowedListValue("WebPartSupportedSimplePropertyNames","<UnsafePropertyName>")
$f.update()

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server 2019

KB 5002436 and KB 5002422 address information disclosure and spoofing vulnerabilities in SharePoint Server. The advisories are CVE-2023-36890, CVE-2023-36891, CVE-2023-36892, CVE-2023-36894.

The language-independent package KB 5002436 includes these SharePoint Server 2019 fixes:

  • Fixes an issue where usage analytics reports fail with an upgraded Search Administration database from a SharePoint Server 2013 Search Service Application (SSA).

  • Fixes an issue where the usage analytics job runs inconsistently when the operating system’s short date format uses a separator other than /.

  • Fixes an issue where the document URL in the ellipsis callout lacks the DocID query parameter.

  • Fixes an issue where My discussions cannot display every discussion item in a discussion board list.

  • Fixes an issue where a SharePoint server running Distributed Cache cannot rejoin a farm with multiple servers.

The following fixes require both the language-dependent package KB 5002422 and the language-independent package KB 5002436:

  • Fixes an issue where a hyperlink column prevents list items from being created or edited in the modern UI.

  • Fixes an issue where the yellow indicator for missing required values remains on the left of the table despite the item having all required values, when the view omits the required fields.

  • Fixes an issue where Managed Metadata and Person columns display a term ID rather than its label.

  • Fixes an issue where opening a list attachment ignores the Open in the client application option.

  • Fixes an issue where changing a choice column prevents list item changes from being saved.

  • Fixes an issue where a notification overlay is hidden behind the Grant Access panel.

Fixes for other components (requirements are stated with each fix):

  • Project Server, KB 5002436: Fixes an issue where CSOM code cannot update a project’s ScheduledFromStart property.

Komentáře