"sword.dll" vulnerable version in SharePoint 2016. Unable to update.

Question

Hi,

Have been using SharePoint 2016. Informed by our security team one of our SharePoint Server is having the sword.dll file version of 16.0.4966.1000 which is vulnerable and minimally need to update version 16.0.4978.1000.

We have been advised to Install the following 2 KB's to complete the update.
KB4484272
KB4493195

When we trying to install the above patches, we are getting the message as these patches not applicable.

We have installed the Cumulative update until May 2021 but our systems are still reflected as Vulnerable since its still reflecting the old Sword.dll version.

Please advise if anyone encountered similar issue or any recommended steps to upgrade Sword.dll file to latest version.

Thank You.

Answer 1

Hi, @IbnuSHR ,

For this issue, here is a workaround you can try. I tested in my lab environment and works.

I renamed the folder in which sword.dll was kept and then repaired the SharePoint application from control panel. After completion of repair, the new folder created and sword.dll also updated to the latest version as per the CU installed. Of course you will need to have the file for installation available on the server. Or you may receive error like this.

Reference of this workaround:
https://learn.microsoft.com/en-us/answers/questions/417496/34sworddll34-is-not-updated-to-latest-version-in-s.html

---

If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hi Jerry,

Based on your inputs, i have renamed the sword.dll file and copy the file from another working server which has the same OS and SharePoint application setup, the error is resolved. I have performed the server and applications restart and all are working as expected.