Update for SharePoint Server 2016 (April 2020 CU)

25.4.2020    |    komentáře   komentářů: 0

A new cumulative update for SharePoint Server 2016 has been released (April 2020 CU).
This CU includes both Feature Pack 2, which has been included since the September CU (September 2017 CU), and the previous Feature Pack 1.

SP Build:
16.0.4993.1000 (Language independent CU)
16.0.4993.1000 (Language dependent CU)

SharePoint 2016 CU – KB articles describing the CU:

  • KB 4484299 – April 2020 Update for SharePoint Server 2016 (language independent)
  • KB 4484301 – April 2020 Update for SharePoint Server 2016 (language dependent)

SharePoint Server 2016 CU – CU download link:

After installation, remember to run the SharePoint 2016 Products Configuration Wizard (SharePoint 2016 Products Configuration Wizard), or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Notice

Feature Pack 2 also includes all functionality from Feature Pack 1.

Always install both packages in this order:

  1. language independent (updates language-independent components)
  2. language dependent (updates language-dependent components)

For language-dependent packages, it does not matter which language you select, as each package contains updates for all languages.

If you install a new language pack on your SharePoint Server 2016 farm, you must then reinstall the language-dependent update package.

Remember that Distributed Cache must also be updated alongside SharePoint; see How to update Distributed Cache correctly and for Office Online Server, you must have the current RTM release; see  How to update Office Online Server.

Included fixes and improvements

The fixes and improvements listed for this CU are excerpts from official Microsoft KB articles in their original language (EN).

SharePoint Server 2016

This security update resolves remote code execution vulnerabilities that exists in Microsoft SharePoint if the software does not check the source markup of an application package. This update also resolves cross-site-scripting (XSS) vulnerabilities that exists if Microsoft SharePoint Server does not correctly sanitize a specially crafted web request to an affected SharePoint server.

To learn more about these vulnerabilities, see the following security advisories: 

This security update resolves a cross-site-scripting (XSS) vulnerability that exists if Microsoft SharePoint Server does not correctly sanitize a specially crafted web request to an affected SharePoint server. This update also resolves a remote code execution vulnerability that exists in Microsoft SharePoint if the software does not check the source markup of an application package. To learn more about the vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2020-0923 and Microsoft Common Vulnerabilities and Exposures CVE-2020-0931.

This security update contains improvements and fixes for the following nonsecurity issues in SharePoint Server 2016:

  • Because Brazil no longer observes daylight saving time, date and time values are displayed incorrectly for list items in site collections that use the “(UTC-03:00) Brasilia” and “(UTC-04:00) Cuiaba” time zones.
  • If a list has many columns and security scopes but fewer than the List View Threshold setting (the default setting is 5,000), it may take long time to open the list because of a slow response from the database server. 
  • Enterprise keywords can’t be saved in the NewDocSet.aspx page after you add another metadata column to the document set. 
  • When you use two separate accounts for the object cache, the publishing sites collections may intermittently display a “Sorry something went wrong” error message. 
  • Word 2016 crashes when you try to save certain documents.
  • Mixtures of Traditional Chinese and other text are not handled correctly by the Chinese Traditional Word Breaker.

Komentáře