Hafnium - Patch for Server 2013 only with installed CU 23 ?

%3CLINGO-SUB%20id%3D%22lingo-sub-2192988%22%20slang%3D%22en-US%22%3EHafnium%20-%20Patch%20for%20Server%202013%20only%20with%20installed%20CU%2023%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2192988%22%20slang%3D%22en-US%22%3E%3CP%3EDear%20community%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20try%20to%20figure%20out%20of%20the%20patch%20for%20Exchange%202013%20only%20can%20be%20installed%20if%20you%20have%20CU23%20already%20installed%20(%20Screenshot).%3C%2FP%3E%3CP%3EDoes%20someone%20know%20if%20this%20is%20really%20true%3F%20We%20have%20planned%20to%20install%20an%20Exchange%20Server%202016%20and%20move%20all%20mail%20boxes%20to%20that%20server%20and%20uninstall%20Ex2013%20but%20that%20was%20planned%20for%20next%20week%20so%20we%20are%20now%20in%20a%20bad%20situation.%20%3CSTRONG%3EDoes%20someone%20know%20if%20this%20updated%20only%20works%20with%20CU%2023%20installed%3C%2FSTRONG%3E%20and%20if%20that%20is%20true%2C%20%3CSTRONG%3Ehow%20can%20we%20minimize%20the%20threat%20for%20our%20EX%202013%20%3F%3C%2FSTRONG%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Ex2013.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F261570iDB4F132225BD3320%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22Ex2013.png%22%20alt%3D%22Ex2013.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2192988%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%20Online%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EExchange%20Server%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EExhange%202013%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EHafnium%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2195266%22%20slang%3D%22en-US%22%3ERe%3A%20Hafnium%20-%20Patch%20for%20Server%202013%20only%20with%20installed%20CU%2023%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2195266%22%20slang%3D%22en-US%22%3EThey%20released%20the%20updates%20to%20some%20older%2Funsupported%20versions%20too%3A%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fexchange-team-blog%2Fmarch-2021-exchange-server-security-updates-for-older-cumulative%2Fba-p%2F2192020%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fexchange-team-blog%2Fmarch-2021-exchange-server-security-updates-for-older-cumulative%2Fba-p%2F2192020%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EStrongly%20advise%20you%20to%20follow%20the%20official%20guidance%20on%20this%2C%20which%20you%20can%20find%20in%20the%20article%20above%20and%20the%20references%20therein.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2195410%22%20slang%3D%22en-US%22%3ERe%3A%20Hafnium%20-%20Patch%20for%20Server%202013%20only%20with%20installed%20CU%2023%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2195410%22%20slang%3D%22en-US%22%3EThey%20covered%20some%20older%202016%2F2019%20CUs%20for%20now....%20nothing%20for%202013%20so%20far%20-%20still%20requires%20CU23.%20At%20least%20they%20should%20allow%20customers%20to%20download%20older%20CUs%20in%20order%20to%20upgrade%20their%20old%202013%20environment.%20We%20have%20some%202013%20SP1%20(CU4)%20servers%20which%20need%20to%20be%20updated%20to%20CU15%20first%2C%20then%20CU19%20and%20then%20to%2022%2F23%20due%20to%20.NET%20changes.%20Looks%20impossible%20to%20find%20links%20for%20these%20CUs...%3C%2FLINGO-BODY%3E
Occasional Contributor

Dear community

 

I try to figure out if the patch for Exchange 2013 only can be installed if you have CU23 already installed ( Screenshot).

Does someone know if this is really true? We have planned to install an Exchange Server 2016 and move all mail boxes to that server and uninstall Ex2013 but that was planned for next week so we are now in a bad situation. Does someone know if this update only works with CU 23 installed and if that is true, how can we minimize the threat for our EX 2013 ?Ex2013.png

3 Replies
They released the updates to some older/unsupported versions too: https://techcommunity.microsoft.com/t5/exchange-team-blog/march-2021-exchange-server-security-update...

Strongly advise you to follow the official guidance on this, which you can find in the article above and the references therein.
They covered some older 2016/2019 CUs for now.... nothing for 2013 so far - still requires CU23. At least they should allow customers to download older CUs in order to upgrade their old 2013 environment. We have some 2013 SP1 (CU4) servers which need to be updated to CU15 first, then CU19 and then to 22/23 due to .NET changes. Looks impossible to find links for these CUs...