As I received some feedback that I should also add the Urls to the KB articles of the different security fixes I added this information to my blog post.
SharePoint 2010 Suite:
SharePoint 2013 Suite:
SharePoint 2016 Suite:
- KB 4464510 – SharePoint Server 2016 (language independent)
SharePoint 2019 Suite:
- KB 4464518 – SharePoint Server 2019 (language independent)
See the Security Update Guide below for more details about the relevant fixes:
Hi Stefan – I just inherited a multi-node 2013 Farm and verified that this farm has SP1 + August 2014 CU installed. I want to install all the available security updates ONLY but I’m not sure if I can just install the the latest PU (April 2019)? Can I install all the security updates en masse? What is the installation order for multiple security updates? Or should I skip some security updates and install only the latest ones? Thank you for your help.
first of all your System is unsupported.
In order to have a supported Environment you need to have at least April 2018 CU installed (see here for details: https://blog.stefan-gossner.com/2017/12/13/updated-product-servicing-policy-for-sharepoint-2013/)
Regarding your questin: you cannot just install the latest PU. The latest PU is cumulative only for the affected component. SharePoint Server 2013 consists of more than 30 individual components and you would have to install the latest security fix for each component.
My recommendation would be to install the Uber package of the latest CU instead which contains all the security fixes for all the components plus various other fixes.
Thanks Stefan for your help.
My User Profile Service application and Search Service App broke after the updates were installed so I have to re-provision them again.
One more question.
After installing an update on the first SP server and running:
“PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install”
Shall I run the same command on the other SP servers or can I just run:
“PSConfig.exe -cmd applicationcontent -install -cmd installfeatures -cmd secureresources”
You should run the same command again. upgraders are implemented by various different objects and perform different types of actions. Not all of them target a SQL database.
HI @Stefan, Quick question. I noticed that on SharePoint 2019 at least on version 16.0.10342.12113 the Microsoft.Office.Excel.WebUI.Internal.dll was not included. This was causing on my environment some issues. I had to grab the dll from SharePoint 2016. Do you know if this was done on purpose?
copying a SharePoint Server 2016 dll to SharePoint Server 2019 is unsupported and can cause unexpected results.
You should open a support case to get this analyzed.
PSA: According to this source, CU 2019-04 should be applied to all SharePoint Servers (2010-2019) that are available from the internet as there seems to be an actual exploit for this vulnerability.
Link ZDNet (trust at your discretion): https://www.zdnet.com/article/microsoft-sharepoint-servers-are-under-attack/
Stefan, do you happen to have any more insight on this purportedly existing exploit that is being used?
Thanks and best regards;
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0604 contains all details.
does this security Issue also effects SharePoint 2010 Server SP1 ?
So would that mean that I have to install first SP2 and then the Security fix ?
SP2 is required before installing this fix.
Thanks, but I would like to know if this vulnerability also applies to SharePoint 2010 SP1 Systems ?
Systems without SP2 are unsupported and have not received any (security) fixes since 5 years. Nobody does an analysis if such a system would be affected by new vulnerabilities. My guess would be yes but as such a system misses fixes for more than 150 other vulnerabilities it sounds strange that you are looking for that specific one.
I have in my environment SP 2016 over SQL Server 2014 SP 3, everything was working well until the last update, we made the deployment of the CU Abril 2019. KB44645410 / KB4461507. After this deployment start to appear a lot of errors in the Event Viewer 5586. With this message.
Unknown SQL Exception 15151 occurred. Additional error information from SQL Server is included below.
Cannot drop the event session ‘SharePoint_Diagnostics_1c54f37b683f44cfaa2556e9b170e3d2_1’, because it does not exist or you do not have permission.
We check all the permissions are all are well set from the SQL Side.
Do you know for any error introduce with this update?
Hi William, this is not a known issue. I would recommend to open a support case to get this analyzed.