A new cumulative update has been released for SharePoint Server 2019 (April 2021 CU).
SP Build:
16.0.10373.20000 (Language independent CU)
16.0.10373.20000 (Language dependent CU)
SharePoint 2019 CU – KB articles describing the CU:
- KB 4504716 – April 2021 Update for SharePoint Server 2019 (language independent)
- KB 4504715 – April 2021 Update for SharePoint Server 2019 (language dependent)
- KB 4504714 – April 2021 Update for Office Online Server
SharePoint Server 2019 CU – CU download link:
- Download April 2021 Update for SharePoint Server 2019 (language independent)
- Download April 2021 Update for SharePoint Server 2019 (language dependent)
- Download April 2021 Update for Office Online Server
After installation, remember to run the SharePoint 2019 configuration wizard (SharePoint 2019 Products Configuration Wizard), or the following command:
PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install
Important
Always install both packages in this order:
- language independent (updates language-independent components)
- language dependent (updates language-dependent components)
For language-dependent packages (language dependent), it does not matter which language you select, because each package contains updates for all languages.
If you install a new language pack on a SharePoint Server 2019 farm, you must subsequently reinstall the language-dependent package (language dependent).
Remember that, in addition to SharePoint, the Distributed Cache service must also be updated; see How to update Distributed Cache correctly and, for Office Online Server, you must have the current RTM version; see How to update Office Online Server.
Included fixes and improvements
The list of fixes and improvements in this CU consists of excerpts from official Microsoft KB articles in their original language (EN).
SharePoint Server 2019
This security update resolves a Word remote code execution vulnerability and SharePoint denial-of-service attack vulnerability. To learn more about these vulnerabilities, see the following security advisories:
- Microsoft Common Vulnerabilities and Exposures CVE-2021-28450
- Microsoft Common Vulnerabilities and Exposures CVE-2021-28453
- Fixes an issue in which some aria attributes aren’t allowed for an elements role in the Start page of a SharePoint web application.
- Fixes an issue on the PDF document parser in which incorrect results are returned when you search PDF files by using keywords.
- Fixes the UpgradeDescriptionField warning that occurs in the logs when you upgrade non-English versions of SharePoint from SharePoint Server 2016 to SharePoint Server 2019.
- Fixes an issue in which the cursor isn’t distinguishable in the Rich Text Enhanced Editor when users visit a page in classic UI by using Microsoft Edge or Google Chrome.
- Fixes an issue in which the document item’s property isn’t displayed correctly in the Properties panel in Word if the document name contains special characters.
This update also contains fixes for the following nonsecurity issues in SharePoint Server 2019. To fix these issues, you have to install KB 4504715 together with this update.
- Fixes an issue in which the focus border is cropped on the “News” link in the “News” web part.
- Fixes an issue on the Search Result page in which the Search filter isn’t defined by having a complementary landmark.
- Fixes an issue in which the focus can move to the non-interactive elements in a News Card on the Start page.
- Fixes an issue in which the focus on the Document page moves to the New button when the View Options menu is closed.
- Fixes an issue in the screen reader while it’s in scan mode in which it reads out some hidden contents after the Cancel button is selected in the Create Communication Site pane.
This security update also contains fixes for the following nonsecurity issues in Project Server 2019:
- Deleting timesheets takes a long time.
- Current Max. Units (%) in Microsoft Project user settings is unexpectedly reset to 100 percent after it’s saved through the client-side object model (CSOM) or UI.
Known issue in this update
Issue
After you install this update, you can no longer delete list item attachments in the item detail panel.
Status
Microsoft is investigating this issue and will post more information in this article when a fix becomes available.
Workaround
To work around this issue, see KB 5003294.
Office Online Server
This security update resolves Microsoft Word remote code execution vulnerability, Microsoft Excel remote code execution vulnerability, and Microsoft Excel information disclosure vulnerability. To learn more, see the following security advisories:
Komentáře