Updates for SharePoint Server Subscription Edition (August 2023 CU)

13 August 2023    |    Comments   Comments: 0

A new cumulative update (August 2023 CU) has been released for SharePoint Server Subscription Edition.

SP Build:
16.0.16130.20684

Starting with the March 2023 CU, updates for SharePoint Server Subscription Edition are released as a single package (known as an Uber package) containing both language-independent and language-dependent fixes. Only one package needs to be installed to fully update the server.

SharePoint Subscription Edition CU – KB articles describing the CU:

  • KB 5002437 – August 2023 Update for SharePoint Server Subscription Edition

SharePoint Server Subscription Edition CU – CU download links:

After installation, remember to run the SharePoint Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

To speed up CU installation, I recommend following the guidance in How to speed up CU installation in SharePoint Server Subscription Edition.

The language you select when downloading the update does not matter because the same package is downloaded for every language.

Note for this CU:

Installing this update requires the release version of SharePoint Server Subscription Edition.

A web part or web form control may fail to appear on a web part page. See KB5029605.

KB5029605 attributes this failure to an unsupported unsafe property name in DataFormParameter. ULS records event 6ipo0 with Found an unsafe PropertyName: <UnsafePropertyName>. A farm administrator can add the affected property name to WebPartSupportedSimplePropertyNames with these commands, substituting the name reported in ULS for the placeholder:

add-pssnapin *
$f=get-spfarm
$f.AddGenericAllowedListValue("WebPartSupportedSimplePropertyNames","<UnsafePropertyName>")
$f.update()

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server Subscription Edition

This CU addresses information disclosure and spoofing vulnerabilities: CVE-2023-36890, CVE-2023-36891, CVE-2023-36892, CVE-2023-36894.

The unified update in KB 5002437 includes these SharePoint Server Subscription Edition fixes:

  • Fixes an issue where a modern list with a hyperlink column prevents creating or editing items.

  • Fixes an issue where usage analytics reports fail for an upgraded SharePoint Server 2013 Search Service Application (SSA) Search Administration database.

  • Fixes an issue where the usage analytics job runs inconsistently when the operating system’s short date format uses a separator other than /.

  • Fixes an issue where My discussions omits discussion items from a discussion board list.

  • Fixes an issue where hovering over a shortened description in the Hero web part does not reveal its tooltip.

  • Fixes an issue where a SharePoint server running Distributed Cache cannot rejoin a farm with multiple servers.

  • Fixes an issue where Copy to and Move to panes represent a document library with a folder icon.

  • Fixes an issue where the Image gallery web part title cannot be saved on a team site page.

  • Fixes an issue where copying search result items on site pages displays an incorrect and confusing copy message.

  • Fixes an issue where image renditions fail for files larger than 1 MB.

Comments are closed.