Updates for SharePoint Server 2019 (November 2023 CU)

19.11.2023    |    komentáře   komentářů: 0

A new cumulative update (November 2023 CU) has been released for SharePoint Server 2019.

SP Build:
16.0.10404.20003 (Language independent CU)
16.0.10404.20003 (Language dependent CU)

SharePoint 2019 CU – KB articles describing the CU:

  • KB 5002526 – November 2023 Update for SharePoint Server 2019 (language independent)
  • KB 5002505 – November 2023 Update for SharePoint Server 2019 (language dependent)

SharePoint Server 2019 CU – CU download links:

After installation, remember to run the SharePoint 2019 Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

Always install both packages in this order:

  1. language independent components (core CU)
  2. language-dependent components (language CU)

For language-dependent packages, the language you select does not matter because each package contains updates for all languages.

If you install a new language pack on a SharePoint Server 2019 farm, you must reinstall the language-dependent update afterwards.

Remember to keep Distributed Cache updated as well as SharePoint. See How to update Distributed Cache correctly (in Czech).

Note for this CU:

KB 5002526 requires the release version of SharePoint Server 2019 to be installed.

Content Security Policy (CSP) restrictions may block some customized classic pages. See KB5033720.

CSP restrictions apply to all classic pages and can block customized pages containing content from a customized domain. After verifying that the domain’s content is safe, a farm administrator can add the domain to AllowIframeAppAuthorizePageDomains with the commands below, replacing <customized domain> with that domain. This includes it in CSP’s allowed domain list:

add-pssnapin *
$f=get-spfarm
$f.AddGenericAllowedListValue("AllowIframeAppAuthorizePageDomains","<customized domain>")
$f.update()

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server 2019

KB 5002526 addresses remote code execution in SharePoint Server. See CVE-2023-38177.

The language-independent package KB 5002526 includes these SharePoint Server 2019 fixes:

  • Fixes an issue where resources across sites cannot be accessed.

  • Fixes an issue where URL rewriting fails for cross-site publishing.

The following fixes require both the language-dependent package KB 5002505 and the language-independent package KB 5002526:

  • KB 5002526: Fixes an issue where, after the August 8, 2023 update KB5002436 is installed, managed metadata column filtering fails in a document library containing more than 1,500 items.

  • KB 5002505: Fixes an issue where, after the August 8, 2023 language pack update KB5002422 is installed, managed metadata column filtering fails in a document library containing more than 1,500 items.

  • Fixes an issue where email messages cannot be dragged directly from Microsoft Outlook into a document library in Microsoft Edge or Google Chrome.

  • Fixes an issue where new list item attachments remain invisible in the Modern UI until the page is refreshed.

  • Fixes an issue where navigating between two lists prevents a list property value from being updated.

Komentáře