Updates for SharePoint Server Subscription Edition (September 2023 CU)

17 September 2023    |    Comments   Comments: 0

A new cumulative update (September 2023 CU) has been released for SharePoint Server Subscription Edition.

SP Build:
16.0.16731.20180

Starting with the March 2023 CU, updates for SharePoint Server Subscription Edition are released as a single package (known as an Uber package) containing both language-independent and language-dependent fixes. Only one package needs to be installed to fully update the server.

SharePoint Subscription Edition CU – KB articles describing the CU:

  • KB 5002474 – September 2023 Update for SharePoint Server Subscription Edition

SharePoint Server Subscription Edition CU – CU download links:

After installation, remember to run the SharePoint Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

To speed up CU installation, I recommend following the guidance in How to speed up CU installation in SharePoint Server Subscription Edition.

The language you select when downloading the update does not matter because the same package is downloaded for every language.

Note for this CU:

Installing this update requires the release version of SharePoint Server Subscription Edition.

Security changes can prevent custom .aspx pages from appearing; ULS records event 92liq. See KB5030804.

The ASPX restriction intentionally strengthens security by blocking unsafe property names. Before applying the workaround, ensure the web part can safely use the property. A farm administrator can allow the name shown in ULS through SharePoint Management Shell; choose the list according to the reported property type.

For SimplePropertyEntry, replace the placeholder with the property name from ULS and run:

add-pssnapin *
$f=get-spfarm
$f.AddGenericAllowedListValue("WebPartSupportedSimplePropertyNames","<UnsafePropertyName>")
$f.update()
iisreset

For BoundPropertyEntry, replace the placeholder with the property name from ULS and run:

add-pssnapin *
$f=get-spfarm
$f.AddGenericAllowedListValue("WebPartSupportedBoundPropertyNames","<UnsafePropertyName>")
$f.update()
iisreset

If AMSI integration was manually enabled on one or more web applications, the upgrade action can fail because it tries to activate the feature again. This affects the configuration wizard, Upgrade-SPFarm and the command-line upgrade. Microsoft documents the fix in October 2023 KB5002506; see KB5031674.

On a new farm with at least two servers and a search topology containing index replicas, this update can break index replication. Replicas stop synchronizing with the primary index component; secondary partition warnings and ULS Search errors referring to SafeSerialization may appear. December 2023 KB5002533 fixes this SPSE-specific problem. See KB5032708.

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server Subscription Edition

This CU addresses an elevation of privilege vulnerability: CVE-2023-36764.

The unified update in KB 5002474 includes these SharePoint Server Subscription Edition changes:

  • Adds the Version 23H2 feature update, which is also included in subsequent SPSE public updates.

  • Renames Azure Active Directory (Azure AD) to Microsoft Entra ID in customer-facing interfaces.

  • Fixes an issue where SPSite or SPWeb objects are not disposed correctly when using SharePoint Framework (SPFx) web parts.

  • Adds a Health Analyzer rule to detect basic authentication as it is being deprecated.

  • Fixes an issue where the Microsoft 365 Apps for Enterprise client cannot update certain SharePoint Document Information Panel (DIP) fields.

  • Fixes an issue where users can reach OneDrive despite selecting Disable OneDrive in SharePoint admin center.

  • Fixes an issue where Delete does not clear cells in document library quick edit when the view has one item.

  • Fixes an issue where the Content Type Replication timer job fails with HTTP error 429.

  • Fixes an issue where .svg images neither open nor preview on a document library page.

  • Fixes an issue where Filter by omits values for a list’s choice column.

  • Fixes an issue where the document library web part keeps its title after switching its target library.

  • Fixes an issue where the Forms library’s quick navigation link works intermittently on a site named Forms.

  • Fixes an issue where Mozilla Firefox cannot use the document library web part’s Upload button.

  • Fixes an issue where anonymous users cannot open Office documents through Office Online Server.

  • Fixes a memory leak when using communication sites.

Fixes for other components (requirements are stated with each fix):

  • Fixes an issue in Project Server in KB 5002474 where CSOM cannot update FixedCostAccrual on DraftTask, PublishedTask or ProjectSummaryTask objects.

Comments are closed.