Updates for SharePoint Server 2019 (September 2023 CU)

17.9.2023    |    komentáře   komentářů: 0

A new cumulative update (September 2023 CU) has been released for SharePoint Server 2019.

SP Build:
16.0.10402.20016 (Language independent CU)
16.0.10402.20016 (Language dependent CU)

SharePoint 2019 CU – KB articles describing the CU:

  • KB 5002472 – September 2023 Update for SharePoint Server 2019 (language independent)
  • KB 5002471 – September 2023 Update for SharePoint Server 2019 (language dependent)

SharePoint Server 2019 CU – CU download links:

After installation, remember to run the SharePoint 2019 Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

Always install both packages in this order:

  1. language independent components (core CU)
  2. language-dependent components (language CU)

For language-dependent packages, the language you select does not matter because each package contains updates for all languages.

If you install a new language pack on a SharePoint Server 2019 farm, you must reinstall the language-dependent update afterwards.

Remember to keep Distributed Cache updated as well as SharePoint. See How to update Distributed Cache correctly (in Czech).

Note for this CU:

KB 5002472 requires the release version of SharePoint Server 2019 to be installed.

Security hardening can prevent some custom .aspx pages from displaying; attempting to open them records event tag 92liq in ULS logs. See KB5030804.

This intentional security change blocks unsafe property names in ASPX tags. A farm administrator can allow an affected property in the SharePoint Management Shell, but must first verify that the web part can use it safely because the workaround bypasses the security improvement. Replace <UnsafePropertyName> in the appropriate command block below with that property name.

For property type SimplePropertyEntry, run:

add-pssnapin *
$f=get-spfarm
$f.AddGenericAllowedListValue("WebPartSupportedSimplePropertyNames","<UnsafePropertyName>")
$f.update()
iisreset

For property type BoundPropertyEntry, run:

add-pssnapin *
$f=get-spfarm
$f.AddGenericAllowedListValue("WebPartSupportedBoundPropertyNames","<UnsafePropertyName>")
$f.update()
iisreset

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server 2019

KB 5002472 addresses elevation of privilege in SharePoint Server. See CVE-2023-36764.

The language-independent package KB 5002472 includes these SharePoint Server 2019 changes:

  • Enables AMSI integration by default for all existing and new web applications. Install the update and run the SharePoint Products Configuration Wizard to apply this change. See Configure AMSI integration with SharePoint Server.

  • Changes AMSI integration so that a web request is not blocked when AMSI cannot inspect it successfully. A new health analyzer rule alerts farm administrators when AMSI protection is not functioning as expected.

  • Fixes an issue where site quota warning alerts fail to use ExternalUrlZone when UseExternalUrlZoneForAlerts is true.

  • Fixes an issue where the Microsoft 365 Apps for Enterprise client cannot update some fields in the SharePoint Document Information Panel (DIP).

  • Fixes an issue where Delete does not clear cell contents in a document library’s quick edit mode when the view contains a single item.

  • Fixes an issue where the Content Type Replication timer job fails with The remote server returned an error: (429).

  • Correctly disposes of SPSite or SPWeb objects used with SharePoint Framework (SPFx) web parts.

  • Fixes an issue where using a communication site leaks memory.

The following improvement requires both the language-dependent package KB 5002471 and the language-independent package KB 5002472:

Komentáře