Updates for SharePoint Server 2019 (July 2021 CU)

15.7.2021    |    komentáře   komentářů: 0

A new cumulative update has been released for SharePoint Server 2019 (July 2021 CU).

SP Build:
16.0.10376.20001 (Language independent CU)
16.0.10376.20001 (Language dependent CU)

SharePoint 2019 CU – KB articles describing the CU:

  • KB 5001975 – July 2021 Update for SharePoint Server 2019 (language independent)
  • KB 5001974 – July 2021 Update for SharePoint Server 2019 (language dependent)
  • KB 5001973 – July 2021 Update for Office Online Server

SharePoint Server 2019 CU – CU download link:

After installation, remember to run the SharePoint 2019 configuration wizard (SharePoint 2019 Products Configuration Wizard), or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important

Always install both packages in this order:

  1. language independent (updates language-independent components)
  2. language dependent (updates language-dependent components)

For language-dependent packages (language dependent), it does not matter which language you select, because each package contains updates for all languages.

If you install a new language pack on a SharePoint Server 2019 farm, you must subsequently reinstall the language-dependent package (language dependent).

Remember that, in addition to SharePoint, the Distributed Cache service must also be updated; see How to update Distributed Cache correctly and, for Office Online Server, you must have the current RTM version; see  How to update Office Online Server.

Included fixes and improvements

The list of fixes and improvements in this CU consists of excerpts from official Microsoft KB articles in their original language (EN).

SharePoint Server 2019

This security update resolves a Microsoft SharePoint Server remote code execution vulnerability and SharePoint Server spoofing vulnerability. To learn more about these vulnerabilities, see the following security advisories:

This security update contains improvements and fixes for the following nonsecurity issues in SharePoint Server 2019:

  • Fixes an issue in which My Sites creation takes a long time in a non-default zone.

  • Fixes the “Processing this item failed because the parser server ran out of memory” error that occurs when you crawl for some kind of files.

  • Fixes an issue in which PSConfig doesn’t start an administrative instance of Microsoft Edge when you try to use SharePoint Server Central Administration.

  • Removes some unnecessary “5538” events in the Windows System event log.

  • Fixes an issue in which the “Link to a Document” content type can’t navigate to the requested resource if both “#” and “?” exist in the URL.

  • Fixes an issue in which a wiki page can’t be displayed in a dialog box in SharePoint classic UI.

  • Fixes an issue in which SharePoint Designer doesn’t create a forms page under a subsite.

  • Fixes an issue in which the Site Aggregator Web Part doesn’t add a new tab as expected.

This update also contains improvements and fixes for the following issues. To fix these issues completely, you have to install KB 5001974 together with this update.

  • Adds the ability to change the ASP.NET view state decryption and validation keys of a SharePoint Server web application. The Set-SPMachineKey PowerShell cmdlet configures and deploys new decryption and validation keys to the servers in the farm. The Update-SPMachineKey PowerShell cmdlet deploys decryption and validation keys to the servers in the farm.

  • Fixes an issue where you can’t find the Apply button when trying to add columns to list views by using Show/hide columns in a document library.

  • Fixes an issue in which the Highlighted Content Web Part doesn’t work in a subsite if the user has no permissions to the root site.

  • Fixes an accessibility issue in which there’s no method to skip or bypass repetitive content.

  • Fixes an accessibility issue in which there’s no feedback provided for unfollowing a site successfully.

  • Fixes an accessibility issue in which screen readers don’t read the drop-down functionality of the Search this site field as combo boxes in classic sites.

Office Online Server

This security update resolves a Microsoft Office Online Server spoofing vulnerability and Microsoft Excel remote code execution vulnerability. To learn more, see Microsoft Common Vulnerabilities and Exposures CVE-2021-34451 and Microsoft Common Vulnerabilities and Exposures CVE-2021-34501.

Note: Support for Windows Server 2019 has been added for Office Online Server.

Using TLS 1.1 and TLS 1.2 together with Office Online Server requires strong cryptography in .NET Framework 4.5 and later versions. This update enables the strong cryptography in .NET Framework 4.5 or later by adding the following registry keys. After you install this update, you don’t have to manually enable strong cryptography, as you would otherwise have to do by following the steps in the first section of Enable TLS 1.1 and TLS 1.2 support in Office Online Server.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319]
“SchUseStrongCrypto”=dword:00000001
“SystemDefaultTlsVersions”=dword:00000001

[HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\.NETFramework\\v4.0.30319]
“SchUseStrongCrypto”=dword:00000001
“SystemDefaultTlsVersions”=dword:00000001

Komentáře