A new cumulative update has been released for SharePoint Server 2019 (July 2020 CU).
SP Build:
16.0.10363.12107 (Language independent CU)
16.0.10362.20025 (Language dependent CU)
SharePoint 2019 CU – KB articles describing the CU:
- KB 4484453 – July 2020 Update for SharePoint Server 2019 (language independent)
- KB 4484452 – July 2020 Update for SharePoint Server 2019 (language dependent)
- KB 4484451 – July 2020 Update for Office Online Server
SharePoint Server 2019 CU – CU download link:
- Download July 2020 Update for SharePoint Server 2019 (language independent)
- Download July 2020 Update for SharePoint Server 2019 (language dependent)
- Download July 2020 Update for Office Online Server
After installation, remember to run the SharePoint 2019 configuration wizard (SharePoint 2019 Products Configuration Wizard), or the following command:
PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install
Important
Always install both packages in this order:
- language independent (updates language-independent components)
- language dependent (updates language-dependent components)
For language-dependent packages (language dependent), it does not matter which language you select, because each package contains updates for all languages.
If you install a new language pack on a SharePoint Server 2019 farm, you must subsequently reinstall the language-dependent package (language dependent).
Remember that, in addition to SharePoint, the Distributed Cache service must also be updated; see How to update Distributed Cache correctly and, for Office Online Server, you must have the current RTM version; see How to update Office Online Server.
Included fixes and improvements
The list of fixes and improvements in this CU consists of excerpts from official Microsoft KB articles in their original language (EN).
SharePoint Server 2019
This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the following security advisories:
- Microsoft Common Vulnerabilities and Exposures CVE-2020-1025
- Microsoft Common Vulnerabilities and Exposures CVE-2020-1147
- Microsoft Common Vulnerabilities and Exposures CVE-2020-1342
- Microsoft Common Vulnerabilities and Exposures CVE-2020-1439
- Microsoft Common Vulnerabilities and Exposures CVE-2020-1443
- Microsoft Common Vulnerabilities and Exposures CVE-2020-1444
- Microsoft Common Vulnerabilities and Exposures CVE-2020-1445
- Microsoft Common Vulnerabilities and Exposures CVE-2020-1446
- Microsoft Common Vulnerabilities and Exposures CVE-2020-1447
- Microsoft Common Vulnerabilities and Exposures CVE-2020-1448
- Microsoft Common Vulnerabilities and Exposures CVE-2020-1450
- Microsoft Common Vulnerabilities and Exposures CVE-2020-1451
- Microsoft Common Vulnerabilities and Exposures CVE-2020-1454
- Microsoft Common Vulnerabilities and Exposures CVE-2020-1456
This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the following security advisories:
- Microsoft Common Vulnerabilities and Exposures CVE-2020-1342
- Microsoft Common Vulnerabilities and Exposures CVE-2020-1445
- Microsoft Common Vulnerabilities and Exposures CVE-2020-1446
- Microsoft Common Vulnerabilities and Exposures CVE-2020-1447
- Microsoft Common Vulnerabilities and Exposures CVE-2020-1448
- The accessibility experience of the SharePoint App Launcher is improved for better integration with assistive technologies.
- “The Unattended Service Account Application ID is not specified or has an invalid value” health rule does not work in a multi-server farm topology that uses MinRole server roles. This update fixes this issue.
- You get different search results when you search for the plural and singular forms of the same word in German.
- Images in a .vsdx file aren’t displayed when the file is opened in a browser by using Visio Services.
- Office document versions are getting trimmed when preservation hold is enabled.
- Fixes an error that occurs when you select the Sync button in the classic document library web part.
- Fixes a memory leak problem that could cause memory bottlenecks and performance issues on web front-end (WFE) servers if there are thousands of site collections across the farm.
- Required Accessible Rich Internet Applications (ARIA)-level attributes are not provided for the SharePoint site Brand bar.
- Focus is moved to the first input box when you activate Invite people and Shared with in the Share dialog box.
- Users who are granted permissions to a SharePoint site through a security group cannot complete a SharePoint 2013 workflow.
- Users receive an “access denied” message when they set Manage User Permissions in the User Profile Service Application.
- Users cannot do machine translation with SharePoint Server 2019 because of the following error: “The service application required to complete this request is unavailable.”
- The accessibility experience of the SharePoint Search ICON button is improved for better integration with assistive technologies.
- The accessibility experience of the SharePoint Command Bar is improved for better integration with assistive technologies.
- Query suggestions aren’t shown in non-default zone web application.
- Different SharePoint Framework apps show the same name in the modern site contents page in the app catalog site.
- Tooltips are not accessible to keyboards for various controls that appear when users create a news post.
- Alt attributes are missing in the Sharepoint.aspx site.
- The program does not navigate the second level “group by” in document views.
- The program does not open lookup fields in modern list web parts.
- The program does not create list items from modern Personal sites.
- The modern OneDrive page does not show the folder icon when you change to tiles view if the server isn’t connected to the internet.
- Query suggestions aren’t shown in non-default zone web application.
- It is now possible to update task custom field values through the REST API.
- Editing a project in Project Web App or approving status updates uses the Project Calculation Service (PCS). In some situations, PCS crashes when it closes a project. The crash details as seen when viewed in the Unified Logging Service (ULS) log (or in the Windows event logs) resembles the following:
“The worker encountered a very serious error and will shutdown. Exception code was: 0xc0000005 (EXCEPTION_ACCESS_VIOLATION).”
This security update contains improvements and fixes for the following nonsecurity issues:
- The accessibility experience of the SharePoint Search ICON button has been improved for better integration with assistive technologies.
- The accessibility experience of the SharePoint Command Bar has been improved for better integration with assistive technologies.
- Fixed: Query suggestions aren’t shown in non-default zone web application.
- Fixed: Different SharePoint Framework apps show the same name in the modern site contents page in the app catalog site.
- Fixed: Tooltips are not accessible to keyboards for various controls that appear when users create a news post.
- Fixed: Alt attributes are missing in the sharepoint.aspx site.
- Fixed: You cannot navigate the second level “group by” in document views.
- Fixed: Lookup fields don’t open in modern list web parts.
- Fixed: List items are not created from modern Personal sites.
- Fixed: The modern OneDrive page does not show the folder icon when you change to tiles view if the server isn’t connected to the internet.
Note To enable these improvements and fixes, you have to install KB 4484453 together with this update.
Office Online Server
This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the following security advisories:
- Microsoft Common Vulnerabilities and Exposures CVE-2020-1342
- Microsoft Common Vulnerabilities and Exposures CVE-2020-1442
- Microsoft Common Vulnerabilities and Exposures CVE-2020-1445
- Microsoft Common Vulnerabilities and Exposures CVE-2020-1446
- Microsoft Common Vulnerabilities and Exposures CVE-2020-1447
- Microsoft Common Vulnerabilities and Exposures CVE-2020-1448
This security update contains fixes for the following nonsecurity issues:
- The Enter, up arrow, and down arrow keys navigate incorrectly in a workbook that has hidden columns. Pressing these keys moves an active cell to a hidden column instead of skipping hidden columns.
- You open a workbook by using Excel Online, and pick a value from a list that’s defined by Data Validation. In some cases, if the text box is forced to grow (for example, by using a large font or text wrap), the edit box hides the first item in the list.
Komentáře