As I received some feedback that I should also add the Urls to the KB articles of the different security fixes I added this information to my blog post.
SharePoint 2010 Suite:
- KB 4461580 – SharePoint Foundation 2010
- KB 4461569 – Excel Services for SharePoint 2010
- KB 4461465 – SharePoint Server 2010 (core components)
- KB 2965312 – Office Web Apps Server 2010
SharePoint 2013 Suite:
- KB 4461558 – SharePoint Foundation 2013 (core components)
- KB 4461549 – SharePoint Server 2013 (core components)
- KB 4092472 – Powerpoint Conversion Services for SharePoint 2013
- KB 4461551 – Office Web Apps Server 2013
SharePoint 2016 Suite:
SharePoint 2019 Suite:
See the Security Update Guide below for more details about the relevant fixes:
More information:
Permalink
Hi Stefan, is it normal that the fix for Office Online Server 2016 is the same as the one for 2019?
Permalink
There is only one Office Online Server which works with SP2016 and SP2019.
Permalink
Seems like MS released one more update for OOS: https://www.microsoft.com/en-us/download/details.aspx?id=57753
Permalink
Hi Aleks,
yes but this fix was released on December 19th after the regular December CU which was released on December 11th.
Cheers,
Stefan
Permalink
Hi Stefan,
Actually we have the SharePoint version 15.0.4927.1000 (last update June 2017) and we would like to install one of the latest security patchs.
Can we install only the SharePoint security fixes released with December 2018 PU without install the CU for SharePoint 2013 ?
If Yes, we need to launch the psconfig or only the security fixes and reboot the servers ?
Thanks in advance.
Permalink
Hi Raphael,
4927.1000 is May 2017 CU. That is an unsupported patch level. You have to install at least April 2018 CU to be supported.
See here for details:
https://blog.stefan-gossner.com/2017/12/13/updated-product-servicing-policy-for-sharepoint-2013/
Aside of the supportability question, what you are trying to do does not make sense.
SharePoint 2013 consists of more than 30 packages which are patched independently. In December 2018 we released only security patches for four of these components.
You would miss out security fixes for all the other components released between May 2017 and December 2018.
If you are not installing December CU you need to install the latest security fix for each of these 30+ components separately.
This is a huge effort and a complicated process. For this reason we always recommend to install the Uber package of the relevant CU rather than individual Patches.
See here for details:
https://blog.stefan-gossner.com/2014/08/18/sharepoint-patching-demystified/
Regarding PSConfig: you always have to run this after installing SharePoint fixes. Independent if these are full CUs or just security fixes.
See here for details:
https://blog.stefan-gossner.com/2015/09/09/why-we-recommend-require-to-run-the-configuration-wizard-also-for-security-fixes/
Cheers,
Stefan
Permalink
Hi Stefan,
Thank you for your answer.
I wasn’t aware of the end of support of May 2017 CU. Good point!
I agree that it doesn’t make a sense to update only the 4 components. It’s effectively huge effort to upgrade separately the 30 components!
In this case, maybe I should go on December 2018 CU to have consistent updates because from January to April 2019 CU, there is no Office web apps CU. The last one is on December 2018 CU. What do you advise ?
Cheers,
Raphaël
Permalink
We usually recommend to evaluate the latest CU rather than an older one. So you could install December CU for Office Web apps and April CU for SharePoint.
Permalink
Sounds great!
So I will go for December CU for Office Web apps and April CU for SharePoint but may I need to deploy also the SharePoint security fixes for April 2019 or it’s included in the CU ?
Permalink
The April CU includes all security fixes released on the same or earlier dates.