Updates for SharePoint Server 2019 (July 2024 CU)

14.7.2024    |    komentáře   komentářů: 0

A new cumulative update (July 2024 CU) has been released for SharePoint Server 2019.

SP Build:
16.0.10412.20001 (Language independent CU)

SharePoint 2019 CU – KB articles describing the CU:

  • KB 5002615 – July 2024 Update for SharePoint Server 2019 (language independent)
  • No new language-dependent package was released for this CU. Use the latest available language CU: KB 5002538 (April 2024 CU).

SharePoint Server 2019 CU – CU download links:

After installation, remember to run the SharePoint 2019 Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

Always install both packages in this order:

  1. language independent components (core CU for this release)
  2. language-dependent components (latest available language CU: KB 5002538, April 2024 CU)

For language-dependent packages, the language you select does not matter because each package contains updates for all languages.

If you install a new language pack on a SharePoint Server 2019 farm, you must reinstall the language-dependent update afterwards.

Remember to keep Distributed Cache updated as well as SharePoint. See How to update Distributed Cache correctly (in Czech).

Note for this CU:

KB 5002615 requires the release version of SharePoint Server 2019 to be installed.

KB 5002615 marks Microsoft.SharePoint.ApplicationPages.SPThemes as unsafe in every Web.config file. This can break some SharePoint PowerShell cmdlets, including Test-SPContentDatabase and the cmdlets that enable Document Sets and Video and Rich Media. Microsoft identifies the September 10, 2024 update KB5002639 as the fix.

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server 2019

KB 5002615 addresses remote code execution in SharePoint and SharePoint Server, and information disclosure in SharePoint Server. The advisories are CVE-2024-32987, CVE-2024-38094, CVE-2024-38023, CVE-2024-38024.

The language-independent package KB 5002615 includes this SharePoint Server 2019 fix:

  • Fixes an issue where users with Add Items permission but without Edit Items permission cannot upload items in the modern UI.

Komentáře