Updates for SharePoint Server 2019 (January 2023 CU)

15.1.2023    |    komentáře   komentářů: 0

A new cumulative update (January 2023 CU) has been released for SharePoint Server 2019.

SP Build:
16.0.10394.20021 (Language independent CU)

SharePoint 2019 CU – KB articles describing the CU:

  • KB 5002329 – January 2023 Update for SharePoint Server 2019 (language independent)
  • No new language-dependent package was released for this CU. Use the latest available language CU: KB 5002310 (December 2022 CU).

SharePoint Server 2019 CU – CU download links:

After installation, remember to run the SharePoint 2019 Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

Always install both packages in this order:

  1. language independent components (core CU for this release)
  2. language-dependent components (latest available language CU: KB 5002310, December 2022 CU)

For language-dependent packages, the language you select does not matter because each package contains updates for all languages.

If you install a new language pack on a SharePoint Server 2019 farm, you must reinstall the language-dependent update afterwards.

Remember to keep Distributed Cache updated as well as SharePoint. See How to update Distributed Cache correctly (in Czech).

Note for this CU:

KB 5002329 requires the release version of SharePoint Server 2019 to be installed.

After KB 5002329 is installed, a SharePoint site may be inaccessible when its URL ends with an extension blocked by the web application. KB5023406 describes the problem and identifies the April 2023 security update KB5002373 as the fix for SharePoint Server 2019.

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server 2019

KB 5002329 addresses remote code execution and security feature bypass vulnerabilities in SharePoint Server. The security advisories are CVE-2023-21742, CVE-2023-21743 and CVE-2023-21744.

The language-independent package KB 5002329 includes the following SharePoint Server 2019 fixes:

  • Fixes an issue where repairing links in the HTML parser corrupts the heap.

  • Fixes an issue where the query builder loses dynamic ordering rules from its Ranking tab after those rules are added in the search results web part.

  • Fixes an issue where searching a list in a non-default zone omits image results.

  • Fixes an issue where the document parser fails to process URL encoding containing square brackets ([]).

  • Fixes an issue where opening a link to another SPSite or SPWeb redirects incorrectly to the default zone URL.

  • Fixes an issue where multiple authentication providers prevent the Quick Edit button from working for a Person or Group column.

Komentáře