Updates for SharePoint Server 2019 (June 2022 CU)

19.6.2022    |    komentáře   komentářů: 0

A new cumulative update (June 2022 CU) has been released for SharePoint Server 2019.

SP Build:
16.0.10387.20008 (Language independent CU)
16.0.10387.20008 (Language dependent CU)

SharePoint 2019 CU – KB articles describing the CU:

  • KB 5002212 – June 2022 Update for SharePoint Server 2019 (language independent)
  • KB 5002211 – June 2022 Update for SharePoint Server 2019 (language dependent)

SharePoint Server 2019 CU – CU download links:

After installation, remember to run the SharePoint 2019 Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

Always install both packages in this order:

  1. language independent components (core CU)
  2. language-dependent components (language CU)

For language-dependent packages, the language you select does not matter because each package contains updates for all languages.

If you install a new language pack on a SharePoint Server 2019 farm, you must reinstall the language-dependent update afterwards.

Remember to keep Distributed Cache updated as well as SharePoint. See How to update Distributed Cache correctly (in Czech).

Note for this CU:

Both updates require an existing SharePoint Server 2019 installation; KB 5002212 specifically requires the release version.

Installing KB 5002211 can require a computer restart.

Run the configuration wizard on every server in the farm after applying the updates, including servers without additional language packs, which also need both update packages.

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server 2019

KB 5002212 covers remote code execution in SharePoint Server and information disclosure in Microsoft Office. The KB lists these vulnerabilities: CVE-2022-30157, CVE-2022-30158, CVE-2022-30159, CVE-2022-30171, CVE-2022-30172.

KB 5002212 also corrects this nonsecurity problem:

  • Content Management Interoperability Services (CMIS) requests no longer fail because numeric values are interpreted as DateTime fields.

These corrections depend on installing both KB 5002211 and KB 5002212:

  • The Edit Link dialog now exposes the dialog role needed for accessibility.

  • The Edit a link dialog title is now marked as a heading.

  • In the modern document library view, multivalue properties now display the required-information banner and enforce entry of required data.

  • The team site creation dialog marks its Team site title as a heading.

  • Checkbox boundaries on the document page no longer have a luminosity contrast ratio below 3.1.

  • The app launcher’s header on the home page no longer contains an unnecessary heading.

  • Opening the hamburger menu now moves focus into its popup panel, and Esc can close it.

  • The New Link dialog can now be dismissed with Esc.

Komentáře