Updates for SharePoint Server Subscription Edition (February 2023 CU)

19 February 2023    |    Comments   Comments: 0

A new cumulative update (February 2023 CU) has been released for SharePoint Server Subscription Edition.

SP Build:
16.0.15601.20478 (Language independent CU)
16.0.15601.20478 (Language dependent CU)

SharePoint Subscription Edition CU – KB articles describing the CU:

  • KB 5002353 – February 2023 Update for SharePoint Server Subscription Edition (language independent)
  • KB 5002352 – February 2023 Update for SharePoint Server Subscription Edition (language dependent)

SharePoint Server Subscription Edition CU – CU download links:

After installation, remember to run the SharePoint Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

Always install both packages in this order:

  1. language independent components (core CU)
  2. language-dependent components (language CU)

For language-dependent packages, the language you select does not matter because each package contains updates for all languages.

If you install a new language pack on a SharePoint Server Subscription Edition farm, you must reinstall the language-dependent update afterwards.

Note for this CU:

Both packages require the release version of Microsoft SharePoint Server Subscription Edition to be installed.

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server Subscription Edition

The main update KB 5002353 addresses SharePoint Server elevation of privilege and Word remote code execution vulnerabilities: CVE-2023-21716 and CVE-2023-21717. The language update KB 5002352 also fixes Word remote code execution vulnerability CVE-2023-21716.

The main update, KB 5002353, contains these SharePoint Server fixes:

  • Fixes an issue where Active Directory import applies user profile updates at the wrong scope.

  • Fixes an issue where blocked file extensions cause failures when folders or subsites are created or accessed.

Fixes for other components (requirements are stated with each fix):

  • Project Server, KB 5002353: Fixes an issue where CSOM resource updates may fail when a remote event handler is attached to a resource event such as Resource Changing.

  • Project Server, KB 5002353: Fixes an issue where the Save and Cancel buttons are disabled on a Portfolio Analysis Add dependency page.

Comments are closed.