Updates for SharePoint Server Subscription Edition (May 2023 CU)

14 May 2023    |    Comments   Comments: 0

A new cumulative update (May 2023 CU) has been released for SharePoint Server Subscription Edition.

SP Build:
16.0.16130.20420

Starting with the March 2023 CU, updates for SharePoint Server Subscription Edition are released as a single package (known as an Uber package) containing both language-independent and language-dependent fixes. Only one package needs to be installed to fully update the server.

SharePoint Subscription Edition CU – KB articles describing the CU:

  • KB 5002390 – May 2023 Update for SharePoint Server Subscription Edition

SharePoint Server Subscription Edition CU – CU download links:

After installation, remember to run the SharePoint Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

To speed up CU installation, I recommend following the guidance in How to speed up CU installation in SharePoint Server Subscription Edition.

The language you select when downloading the update does not matter because the same package is downloaded for every language.

Note for this CU:

Installing this update requires the release version of Microsoft SharePoint Server Subscription Edition to be present on the computer.

This security update supersedes the previously released update KB 5002375.

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server Subscription Edition

KB 5002390 addresses vulnerabilities in Microsoft SharePoint Server involving spoofing, information disclosure and remote code execution. The associated security advisories are CVE-2023-24950, CVE-2023-24954 and CVE-2023-24955.

The unified package KB 5002390 includes the following nonsecurity changes for SharePoint Server Subscription Edition:

  • Updates SharePoint search to work with the Hybrid Configuration Wizard and the PowerShell configuration scripts for cloud hybrid search released on or after May 9, 2023. These versions use Microsoft Authentication Library (MSAL) and the Microsoft Graph PowerShell module, which remain supported after June 30, 2023. Earlier versions relied on Active Directory Authentication Library (ADAL) and the Microsoft Online PowerShell module, both of which reach the end of support on June 30, 2023.

  • Optimizes how the state of an Internet Information Services (IIS) application pool is checked when the pool is stopped or started.

  • Increases the performance counters for the BLOB cache.

  • Fixes an issue where connections to the SharePoint Distributed Cache service encounter difficulties when the service runs on servers with the custom server role or on another server in a farm with multiple servers. These issues were introduced by the January 10, 2023 security update for SharePoint Server Subscription Edition (KB5002331).

  • Fixes an issue where creating Search service applications fails after the March 14, 2023 security update for SharePoint Server Subscription Edition (KB5002355) or a later update is installed.

  • Fixes an issue where communication sites no longer display the search box after the March 14, 2023 security update for SharePoint Server Subscription Edition (KB5002355) or a later update is installed.

  • Fixes an issue where reacquiring identity tokens can fail and cause authorization errors in certain scenarios, including opening and saving documents through Office Online Server.

  • Fixes an issue where a document library exposes stub files that should remain hidden by default and should never appear in the library.

  • Fixes an issue where adding a File viewer web part link from the root site is not possible.

  • Fixes an issue where the New Item label on a modern list page remains untranslated.

Comments are closed.