Updates for SharePoint Server 2019 (September 2024 CU)

15.9.2024    |    komentáře   komentářů: 0

A new cumulative update (September 2024 CU) has been released for SharePoint Server 2019.

SP Build:
16.0.10414.20002 (Language independent CU)

SharePoint 2019 CU – KB articles describing the CU:

  • KB 5002639 – September 2024 Update for SharePoint Server 2019 (language independent)
  • No new language-dependent package was released for this CU. Use the latest available language CU: KB 5002597 (August 2024 CU).

SharePoint Server 2019 CU – CU download links:

After installation, remember to run the SharePoint 2019 Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

Always install both packages in this order:

  1. language independent components (core CU for this release)
  2. language-dependent components (latest available language CU: KB 5002597, August 2024 CU)

For language-dependent packages, the language you select does not matter because each package contains updates for all languages.

If you install a new language pack on a SharePoint Server 2019 farm, you must reinstall the language-dependent update afterwards.

Remember to keep Distributed Cache updated as well as SharePoint. See How to update Distributed Cache correctly (in Czech).

Note for this CU:

KB 5002639 requires the release version of SharePoint Server 2019 to be installed.

After the update, deserialization can fail for custom types derived from IDictionary. See KB5043462.

Types outside the deserialization allow list are blocked, producing ULS tags 4nsby or 4nss4 and the error An unsupported IDictionary type was detected. Type: <Type>, Assembly: <Assembly>. If the failure occurs in w3wp.exe, a farm administrator may allow a blocked type only after confirming that it is safe. In Web.config, under configuration/SharePoint/SafeMode/AllowedListItems, add an AllowedItem named AllowedIDictionaryType and specify either its Type or its Assembly.

Workflow publishing can fail when an unauthorized type is blocked, with ULS event tag c42q0. Locate that tag to identify the blocked type. If both the type and its assembly are safe, register the type in the authorized list in Web.config. Microsoft gives this example:

<System.Workflow.ComponentModel.WorkflowCompiler>
<authorizedTypes>
<targetFx version="v4.0">
<authorizedType Assembly="Microsoft.SharePoint.WorkflowActions, Version=16.0.0.0, Culture=neutral, PublicKeyToken=null" Namespace="Microsoft.SharePoint.WorkflowActions.WithKey" TypeName="*" Authorized="True" />
</targetFx>
</authorizedTypes>

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server 2019

KB 5002639 addresses remote code execution and denial of service in SharePoint Server. The advisories are CVE-2024-38018, CVE-2024-38227, CVE-2024-38228, CVE-2024-43464, CVE-2024-43466.

The language-independent package KB 5002639 includes these SharePoint Server 2019 fixes:

  • Fixes an issue introduced by KB 5002615 where marking Microsoft.SharePoint.ApplicationPages.SPThemes as unsafe in all Web.config files prevents some SharePoint PowerShell cmdlets from working correctly.

  • Fixes an issue where installing the latest .NET cumulative updates disrupts business data connectivity (BDC) features.

Komentáře