Update for SharePoint Server 2016 (April 2021 CU)

A new cumulative update for SharePoint Server 2016 has been released (April 2021 CU).
This CU includes both Feature Pack 2, which has been included since the September CU (September 2017 CU), and the previous Feature Pack 1.

SP Build:
16.0.5149.1000 (Language independent CU)
16.0.5149.1000 (Language dependent CU)

SharePoint 2016 CU – KB articles describing the CU:

• KB 4504719 – April 2021 Update for SharePoint Server 2016 (language independent)
  
• KB 4504723 – April 2021 Update for SharePoint Server 2016 (language dependent)

SharePoint Server 2016 CU – CU download link:

• Download April 2021 Update for SharePoint Server 2016 (language independent)
  
• Download April 2021 Update for SharePoint Server 2016 (language dependent)

After installation, remember to run the SharePoint 2016 Products Configuration Wizard (SharePoint 2016 Products Configuration Wizard), or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Notice

Feature Pack 2 also includes all functionality from Feature Pack 1.

Always install both packages in this order:

1. language independent (updates language-independent components)
2. language dependent (updates language-dependent components)

For language-dependent packages, it does not matter which language you select, as each package contains updates for all languages.

If you install a new language pack on your SharePoint Server 2016 farm, you must then reinstall the language-dependent update package.

Remember that Distributed Cache must also be updated alongside SharePoint; see How to update Distributed Cache correctly and for Office Online Server, you must have the current RTM release; see  How to update Office Online Server.

Included fixes and improvements

The fixes and improvements listed for this CU are excerpts from official Microsoft KB articles in their original language (EN).

SharePoint Server 2016

This security update resolves a Microsoft Word Remote Code Execution Vulnerability and SharePoint Denial of Service Update. To learn more about the vulnerabilities, see the following security advisories:

• Microsoft Common Vulnerabilities and Exposures CVE-2021-28450
• Microsoft Common Vulnerabilities and Exposures CVE-2021-28453

This update contains fixes for the following nonsecurity issues in SharePoint Server 2016:

• Fixes an issue on the PDF document parser where incorrect results are returned when you search PDF files by using keywords.

• Fixes an issue where items are duplicated in Quick Edit mode when you copy more than 100 items from Excel into a list.

• Fixes an issue where SharePoint Server fails to save all checked containers in Active Directory Import.

• Fixes the incompatible issue that’s caused by the deprecation of the showModalDialog API in modern browsers.

• Fixes an issue where PowerBI will fail with a HTTP 403 error if users use the “SharePoint Folder” connector with SharePoint web applications that are secured by a trusted identity provider.

• Fixes an issue where the SharePoint Products Configuration Wizard fails to complete when the SQL Server collation is Turkish_CI_AS. Additionally, the PSCDiagnostics log shows an error message that resembles the following:
  
  ERR Failed to upgrade SharePoint Products.
  An exception of type System.Data.SqlClient.SqlException was thrown.
  Additional exception information: Must declare the scalar variable “@newViewUID”.
  System.Data.SqlClient.SqlException (0x80131904): Must declare the scalar variable “@newViewUID”.
  
  This issue occurs after you install KB 4486753 and KB 4486721.

This update also contains a fix for the following nonsecurity issue in Project Server 2016:

• The Approval Center fails to load if there are status updates submitted for summary tasks.
  
  This issue occurs after you install KB 4493163.