Lucene search

K
mskbMicrosoftKB4493231
HistoryMar 09, 2021 - 8:00 a.m.

Description of the security update for SharePoint Server 2019 Language Pack: March 9, 2021 (KB4493231)

2021-03-0908:00:00
Microsoft
support.microsoft.com
91

4.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

5.1 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.294 Low

EPSS

Percentile

96.8%

Description of the security update for SharePoint Server 2019 Language Pack: March 9, 2021 (KB4493231)

Summary

This security update resolves a Microsoft SharePoint spoofing vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-24104.

**Note:**To apply this security update, you must have the release version of Microsoft SharePoint Server 2019 installed on the computer.

Improvements and fixes

This update removes the Document and List Static Data Fixed Sample****Job timer job from SharePoint Server. This timer job is intended for SharePoint Online use only. Therefore, it should not be included in SharePoint Server.

**Note:**To fix this issue, you have to install KB 4493230 together with this update.

This security update also contains fixes for the following nonsecurity issues in SharePoint Server 2019. To fix these issues, you have to install KB 4493230 together with this update.

  • Fixes an issue in which all the subsites themes will be changed at the same time when a root site theme is changed.
  • Fixes an issue in which some texts in the Chinese (Traditional) language version of SharePoint Server 2019 appear as the Chinese (Simplified) language in modern UI.
  • Fixes an issue in which Try link is shown as a link in theNew linkpane if the**Address **field is empty in high contrast mode.
  • Fixes an issue in which the focus is not clear on the back button in the Create Site pane.
  • Fixes an issue in which there is no close button to close the Create a site dialog box by using the keyboard.
  • Fixes an issue in which the Rich Text toolbar disappears when you input many lines of text.
  • Fixes an issue in which DatePicker doesn’t render in the modern item properties pane in document libraries.
  • Fixes an issue in which a list folder can’t be renamed successfully in the modern UI.
  • Fixes an issue in which a folder in a modern view document can’t be opened after you install the ListView Command Set extension.
  • Fixes an issue in which in a modern view custom list, the preview of a lookup item doesn’t work from the details pane and the preview is truncated in the list view.
  • Fixes an issue in which the left navigation pane disappears when you create a sub link and then delete it.
  • Fixes an issue in which link items are missing when you edit the left navigation pane.
  • Fixes an issue in which the Change the look Panel doesn’t have a close button.
  • Fixes an issue in which the focus is not visible in the site Activitytile.
  • Fixes an issue in which the focus status is missing when you select the More Option button in the communication site left pane and then select an option item on the popup menu.
  • Fixes an issue in which the focus status is missing when you select the Followingor Not Following button.
  • Fixes an issue in which Narrator doesn’t announce anything about the More Option button in the site’s left pane.
  • Fixes an issue in which the required aria attributes are missing in the Create List panel.
  • Fixes an issue in which Narrator does not announce the number of items and the order number of each item in Featured Links.
  • Fixes an issue in which the Get the mobile app button doesn’t have sufficient color contrast.

Known issue in this update

IssueAfter you install this update, you can no longer delete list item attachments in the item detail panel.StatusMicrosoft is investigating this issue and will post more information in this article when a fix becomes available.WorkaroundTo work around this issue, see KB 5003294.

How to get and install the update

Method 1: Microsoft Update

This update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see Windows Update: FAQ.

Method 2: Microsoft Update Catalog

To get the standalone package for this update, go to the Microsoft Update Catalog website.

Method 3: Microsoft Download Center

You can get the standalone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

More information

Security update deployment information

For deployment information about this update, see Security update deployment information: March 9, 2021 (KB5001208).

Security update replacement information

This security update replaces previously released security update 4493161.

File hash information

File name SHA1 hash SHA256 hash
wssloc2019-kb4493231-fullfile-x64-glb.exe 0DF0F64CF6B9A229195118BD2FF19FDAEA2BB484 9581ED719BAF52A19D23038290A5F32EAFD0D70FD5C20E8F260C85864879F691

File information

Download the list of files that are included in security update 4493231.

Information about protection and security

Protect yourself online: Windows Security supportLearn how we guard against cyber threats: Microsoft Security

4.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

5.1 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.294 Low

EPSS

Percentile

96.8%