A new cumulative update (June 2023 CU) has been released for SharePoint Server Subscription Edition.
SP Build:
16.0.16130.20548
Starting with the March 2023 CU, updates for SharePoint Server Subscription Edition are released as a single package (known as an Uber package) containing both language-independent and language-dependent fixes. Only one package needs to be installed to fully update the server.
SharePoint Subscription Edition CU – KB articles describing the CU:
- KB 5002416 – June 2023 Update for SharePoint Server Subscription Edition
SharePoint Server Subscription Edition CU – CU download links:
After installation, remember to run the SharePoint Products Configuration Wizard or the following command:
PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install
Important notes
To speed up CU installation, I recommend following the guidance in How to speed up CU installation in SharePoint Server Subscription Edition.
The language you select when downloading the update does not matter because the same package is downloaded for every language.
Note for this CU:
Installing this update requires the release version of SharePoint Server Subscription Edition.
Included fixes and improvements
The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.
SharePoint Server Subscription Edition
This CU addresses elevation of privilege, denial of service and spoofing vulnerabilities: CVE-2023-33129, CVE-2023-33130, CVE-2023-33132, CVE-2023-33142.
The unified update in KB 5002416 includes these SharePoint Server Subscription Edition fixes:
-
Fixes an issue where pages in the Site Pages library always receive the default content type.
-
Fixes an issue where a document library reports the wrong error when a document is renamed to a name already in use.
-
Fixes an issue where access to the token cache fails to work correctly.
-
Fixes an issue where property demotion fails for ink-enabled
.docxdocuments. -
Fixes an issue where
listdata.svcfails to retrieve a list whose name includes spaces, even when a decoded space is used. -
Fixes an issue where site quota warning alerts do not use
ExternalUrlZonewhenUseExternalUrlZoneForAlertsistrue. -
Fixes an issue where the Microsoft 365 Apps for Enterprise client cannot update certain SharePoint Document Information Panel (DIP) fields.
-
Fixes an issue where users with
Readpermission see the Upload button and can consequently upload by dragging files into the document library web part. -
Fixes an issue where adding Form Based Authentication prevents
Viewlsts.aspxfrom opening correctly. -
Fixes an issue where OneDrive shows a spinning loading indicator in place of a location under Sites after Move to is selected.