Updates for SharePoint Server Subscription Edition (November 2023 CU)

19 November 2023    |    Comments   Comments: 0

A new cumulative update (November 2023 CU) has been released for SharePoint Server Subscription Edition.

SP Build:
16.0.16731.20350

Starting with the March 2023 CU, updates for SharePoint Server Subscription Edition are released as a single package (known as an Uber package) containing both language-independent and language-dependent fixes. Only one package needs to be installed to fully update the server.

SharePoint Subscription Edition CU – KB articles describing the CU:

  • KB 5002527 – November 2023 Update for SharePoint Server Subscription Edition

SharePoint Server Subscription Edition CU – CU download links:

After installation, remember to run the SharePoint Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

To speed up CU installation, I recommend following the guidance in How to speed up CU installation in SharePoint Server Subscription Edition.

The language you select when downloading the update does not matter because the same package is downloaded for every language.

Note for this CU:

Installing this update requires the release version of SharePoint Server Subscription Edition.

CSP protection on classic pages can block customized pages that load content from a customized domain. As described in KB5033720, verify that the domain’s content is safe before unblocking it. A farm administrator can add the domain to AllowIframeAppAuthorizePageDomains with these commands, replacing the placeholder with the domain:

add-pssnapin *
$f=get-spfarm
$f.AddGenericAllowedListValue("AllowIframeAppAuthorizePageDomains","<customized domain>")
$f.update()

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server Subscription Edition

This CU addresses a remote code execution vulnerability: CVE-2023-38177.

The unified update in KB 5002527 includes these SharePoint Server Subscription Edition fixes:

  • Fixes an issue where missing values in required managed metadata columns trigger neither a red dot on View options nor a notification icon on Files that need attention.

  • Fixes an issue where a yellow missing-value bar appears beside a file name despite required fields being filled, including when those fields are absent from the view.

  • Fixes an issue where multiple managed metadata filters prevent filters from being edited correctly.

  • Fixes an issue where Shared with me on a My Site using Finnish regional settings shows the modification date incorrectly as 1.1.1901.

  • Fixes an issue where the Hero web part’s Options section lacks its drop-down list.

  • Fixes an issue where URL rewriting for cross-site publishing fails.

Comments are closed.