A new cumulative update for SharePoint Server 2016 has been released (October 2020 CU).
This CU includes both Feature Pack 2, which has been included since the September CU (September 2017 CU), and the previous Feature Pack 1.
SP Build:
16.0.5227.1000 (Language independent CU)
SharePoint 2016 CU – KB articles describing the CU:
- KB 5002029 – October 2021 Update for SharePoint Server 2016 (language independent)
- KB 5002006 – October 2021 Update for SharePoint Server 2016 (language dependent)
SharePoint Server 2016 CU – CU download link:
- Download October 2021 Update for SharePoint Server 2016 (language independent)
- Download October 2021 Update for SharePoint Server 2016 (language dependent)
After installation, remember to run the SharePoint 2016 Products Configuration Wizard (SharePoint 2016 Products Configuration Wizard), or the following command:
PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install
Notice
Feature Pack 2 also includes all functionality from Feature Pack 1.
Always install both packages in this order:
- language independent (updates language-independent components)
- language dependent (updates language-dependent components)
For language-dependent packages, it does not matter which language you select, as each package contains updates for all languages.
If you install a new language pack on your SharePoint Server 2016 farm, you must then reinstall the language-dependent update package.
Remember that Distributed Cache must also be updated alongside SharePoint; see How to update Distributed Cache correctly and for Office Online Server, you must have the current RTM release; see How to update Office Online Server.
Included fixes and improvements
The fixes and improvements listed for this CU are excerpts from official Microsoft KB articles in their original language (EN).
SharePoint Server 2016
This security update resolves a Microsoft SharePoint Server spoofing vulnerability, Microsoft Word remote code execution vulnerability, and Microsoft SharePoint Server remote code execution vulnerability. To learn more about the vulnerabilities, see the following security advisories:
- Microsoft Common Vulnerabilities and Exposures CVE-2021-40484
- Microsoft Common Vulnerabilities and Exposures CVE-2021-40486
- Microsoft Common Vulnerabilities and Exposures CVE-2021-41344
This security update contains fixes for the following nonsecurity issues in SharePoint Server 2016:
- Fixes an issue in which creating a Word document by using a template doesn’t start the client application even if the document library is set to OpenInClient in classic experience.
- Fixes an issue in which the client application can’t be started to open a non-browser-enabled InfoPath form in modern browsers. Additionally, you receive the following error message:
“This form cannot be opened in a Web browser. To open this form, use Microsoft InfoPath.” - Fixes an issue in which SharePoint Designer doesn’t work for non-English sites.
Komentáře