Updates for SharePoint Server 2016 (October 2022 CU)

16.10.2022    |    komentáře   komentářů: 0

A new cumulative update (October 2022 CU) has been released for SharePoint Server 2016.

This CU includes both Feature Pack 2, available since the September CU (September 2017 CU), and the earlier Feature Pack 1.

SP Build:
16.0.5365.1000 (Language independent CU)

SharePoint 2016 CU – KB articles describing the CU:

  • KB 5002287 – October 2022 Update for SharePoint Server 2016 (language independent)
  • No new language-dependent package was released for this CU. Use the latest available language CU: KB 5002142 (September 2022 CU).

SharePoint Server 2016 CU – CU download links:

After installation, remember to run the SharePoint 2016 Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

Always install both packages in this order:

  1. language independent components (core CU for this release)
  2. language-dependent components (latest available language CU: KB 5002142, September 2022 CU)

For language-dependent packages, the language you select does not matter because each package contains updates for all languages.

If you install a new language pack on a SharePoint Server 2016 farm, you must reinstall the language-dependent update afterwards.

Remember to keep Distributed Cache updated as well as SharePoint. See How to update Distributed Cache correctly (in Czech).

Note for this CU:

This update requires the release version of SharePoint Enterprise Server 2016.

Enabling the modern OneDrive for Business experience, through this update or manually, requires active Software Assurance at that time. If that requirement is not met, disable the modern experience.

KB 5002287 can block some SharePoint 2010 workflows and log the ULS tag 6ksbk. See KB5020238.

Workflow .xoml files must use UTF-8. SharePoint Designer, Visual Studio and Nintex already produce that encoding by default; the problem affects files manually converted to a different encoding. Convert affected files back to UTF-8, set UTF-8 in the XML declaration, save them as UTF-8 in the editor and redeploy them. The Microsoft KB also provides a site-collection scanning script for SharePoint Management Shell: its IsGoodWorkflow result is True for compatible UTF-8 files and False for files needing correction.

Deleting a web application can fail after this update. See KB5031287 for the affected deployment scenario and workaround.

This deletion failure affects a new farm whose installation media includes October 2022 or later updates and which uses the least-privileged security model. The error reports denied DELETE permission on SiteCounts in SharePoint_Config, schema dbo, because the application pool account cannot be added to the WSS_CONTENT_APPLICATION_POOLS role in the SharePoint Admin content database. After running the SharePoint Configuration Wizard on the first farm server, and before the Farm Configuration Wizard or provisioning additional components, grant the database permissions with:

Get-SPDatabase | %{$_.GrantOwnerAccessToDatabaseAccount()}

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server 2016

KB 5002287 addresses remote code execution vulnerabilities in SharePoint Server: CVE-2022-41036, CVE-2022-41037, CVE-2022-41038, CVE-2022-38053.

The language-independent package KB 5002287 includes this SharePoint improvement:

  • Improves the SQL Server configuration of the SharePoint farm service account for operation with the minimum necessary privileges.

Komentáře