The product group released the March 2021 Cumulative Update for SharePoint Server 2016 product family.
This CU also includes Feature Pack 1 which was released with December 2016 CU and Feature Pack 2 which was released with September 2017 CU.
The KB articles for March 2021 CU are available here:
- KB 4493232 – March 2021 Update for SharePoint Server 2016 (language independent) – This is also a security update!
- KB 4493199 – March 2021 Update for SharePoint Server 2016 (language dependent) – This is also a security update!
The download for March 2021 CU is available here:
- Download March 2021 Update for SharePoint Server 2016 (language independent) – This is also a security update!
- Download March 2021 Update for SharePoint Server 2016 (language dependent) – This is also a security update!
Important: It is required to install both fixes (language dependent and independent) to fully patch a SharePoint server. This applies also to servers which do not have language packs installed. The reason is that each SharePoint installation includes a language dependent component together with a language independent component. If additional language packs are added later (only) the language dependent fix has to be applied again.
It is irrelevant which language you pick on the drop down in download center. Even the language dependent fixes are all in the same package for all languages.
After installing the fixes you need to run the SharePoint 2016 Products Configuration Wizard on each machine in the farm. If you prefer to run the command line version psconfig.exe ensure to have a look here for the correct options.
SharePoint 2016 March 2021 CU Build Numbers:
Language independent fix: 16.0.5134.1001
Language dependent fix: 16.0.5134.1000
To understand the different version numbers please have a look at my article which explains the different SharePoint build numbers.
Please ensure to have a look at the SharePoint Patching Best Practices before applying new fixes.
Related Links:
- Technet: Updated Product Servicing Policy for SharePoint Server 2016
- Blog: SharePoint Patching Best Practices
- Blog: Common Question: What is the difference between a PU, a CU and a COD?
- Blog: SharePoint Patching demystified
- Blog: Why I prefer PSCONFIGUI.EXE over PSCONFIG.EXE
- Technet: Update Center for Microsoft Office, Office Servers, and Related Products
- Blog: SharePoint Server 2016 Patch Build Numbers Powershell Module
- Blog: SharePoint Server 2016 Zero-Downtime Patching Demystified
- Blog: SharePoint does not have a build version. Full Stop.
Permalink
Hi Stefan, does this CU include updates which released with past CUs for SP 2016?
Permalink
Yes – otherwise it would not be a CU.
Permalink
Any known issue in this patch since i am going to patch the PROD servers. Please let me know if any
Permalink
Hi Tina, have you applied the patch in PROD in the meantime? What are your experiences so far?
Permalink
Have you applied the patch in PROD in the meantime? What are your experiences so far?
Permalink
can we dismount/mount all content databases during in sharepoint server 2016 pre-post CU installation. is it fine to perform the step and what will be the criticality if we do so ?
Permalink
Hi Nischay,
you can certainly do this but I’m not sure what the benefit would be as it would cause a downtime which can be avoided otherwise using zero-downtime patching functionality.
Cheers,
Stefan
Permalink
Hi Stephen,
We are planning to Install March 2021 CU in our SharePoint 2016 servers and we also want to patch for this vulnerability.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31963
Can you please let us know if the fix for this vulnerability is included in March 2021 CU or do we need to install separate hot fix.
If its not included then how to install both together March 2021 CU+ Host fix.
Permalink
Hi Subhash,
this is fixed in June 2021 CU.
So rather than installing March CU you would need to install June CU.
Cheers,
Stefan
Permalink
Hi Stephen,
We have October 2020 CU installed in our SharePoint 2016 servers.
if we want to install the hot fix for CVE-2021-31963 vulnerability then do we need to run configuration wizard after installing the hot fix from below URL
https://www.microsoft.com/en-us/download/details.aspx?id=103207
Permalink
Of course. All SharePoint fixes require the config wizzard.
But you should not install the fix you listed without installing the language dependent fixes from June which also include security fixes:
https://blog.stefan-gossner.com/2021/06/09/june-2021-cu-for-sharepoint-server-2016-is-available-for-download/
Permalink
Hi Stephen,
So in order to install the hot fix for this Vulnerability then we need to install KB 5001946 & KB 5001922 which also include previous update as well and then our farm version will change to June 2021.
Is it possible to install only security update for this fix and not complete June 2021 CU.
Permalink
Hi Subhash,
SharePoint fixes are cumulative and always include all security and non-security fixes up to this point.
Cheers,
Stefan
Permalink
Hello Stefan,
Is there an order to install the Language independent and the Language dependent fixes or it doesn’t matter?
The configuration wizard is only executed after installing both fixes correct?
Thanks!
Permalink
Hi Rui,
there is no reqired sequence.
PSConfig is only required once.
Cheers,
Stefan