Updates for SharePoint Server Subscription Edition (January 2022 CU)

16 January 2022    |    Comments   Comments: 0

A new cumulative update (January 2022 CU) has been released for SharePoint Server Subscription Edition.

SP Build:
16.0.14326.20714 (Language independent CU)
16.0.14326.20714 (Language dependent CU)

SharePoint Subscription Edition CU – KB articles describing the CU:

  • KB 5002111 – January 2022 Update for SharePoint Server Subscription Edition (language independent)
  • KB 5002110 – January 2022 Update for SharePoint Server Subscription Edition (language dependent)

SharePoint Server Subscription Edition CU – CU download links:

After installation, remember to run the SharePoint Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

Always install both packages in this order:

  1. language independent components (core CU)
  2. language-dependent components (language CU)

For language-dependent packages, the language you select does not matter because each package contains updates for all languages.

If you install a new language pack on a SharePoint Server Subscription Edition farm, you must reinstall the language-dependent update afterwards.

Note for this CU:

For customizations affected by the restricted Web.config permissions, a farm administrator can grant trusted users the required permissions through the file’s Properties > Security > Edit > Add, resolve the username with Check Names, and apply the selected permissions. Use this workaround only for affected customizations. To prevent permission restrictions on new files by default, a farm administrator can run the following commands, as documented in KB5010126:

Add-PSSnapin Microsoft.SharePoint.PowerShell
$farm = Get-SPFarm
$farm.SkipUpdateWebConfigPermission = $true
$farm.Update()

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server Subscription Edition

The main update KB 5002111 addresses remote code execution vulnerabilities in SharePoint Server (CVE-2022-21837) and Microsoft Office (CVE-2022-21840).

The language-dependent update KB 5002110 also addresses the Microsoft Office remote code execution vulnerability CVE-2022-21840.

The following changes are included in the main update KB 5002111:

  • Restricts access to Web.config files to local administrators, farm administrators, and users managed by SharePoint. Standard SharePoint functionality is unaffected. Customizations that rely on the previous permissions may require the workaround in KB5010126.

  • Fixes an issue where a modern browser cannot copy and paste list items in quick edit mode.

  • Removes redundant stored procedure calls that can lead to SQL Server deadlocks when a page contains multiple apps and user load is high.

  • Improves performance when rendering pages.

  • Fixes an issue where filtering a Managed Metadata Services (MMS) column in the modern experience selects every other term in the hierarchy after a subterm is chosen.

  • Fixes an issue where enabling the Publishing feature exposes hidden left navigation nodes on a modern team site.

  • Fixes an issue where an event cannot be added to a modern site page.

  • Fixes an issue where Content Deployment cannot publish incremental changes.

  • Fixes an issue where several ARIA attributes are disallowed for the People Picker when creating a new item on a modern team site.

  • Fixes an issue where a focused field in the list editing dialog lacks its rectangular border.

  • Fixes an issue where the top ribbon truncates the username when the selected language is he-il (Hebrew – Israel).

  • Fixes an issue where SAML providers display a scope property.

  • Fixes an issue where crawling fails for document sets containing non-ASCII characters.

  • Fixes an issue where Copy-SPSideBySideFiles recursively copies token folders during an upgrade that fails to remove the old token folders.

  • Fixes an issue where navigating with Tab moves focus outside the New link dialog.

  • Fixes an issue where certificate assignment cannot be replaced if the certificate was not assigned during import.

  • Fixes an issue where keyboard activation of Add a list opens the Create list pane twice.

  • Fixes an issue where a group member receives a No UI error when attempting to share a modern team site.

  • Fixes an issue where a new OpenID Connect (OIDC) token issuer cannot use the UPA-backed claim provider.

  • Fixes an issue where the calendar view does not accept changing the first day of the week back to Sunday from another day.

  • Fixes an issue where an incorrect site URL delays the appearance of a recently shared item in the OneDrive mobile app for Android.

  • Fixes an issue where focus on the show actions button is invisible on the Site Contents page in high contrast mode.

  • Fixes an issue where the More Options button in a page’s Comments section lacks a descriptive label.

  • Fixes an issue where the Site Contents page loses the New Site button at 200 percent zoom.

  • Fixes an issue where _admin/certificatesettings.aspx cannot be accessed with the least-restrictive permissions.

  • Fixes an issue where replacing a duplicate file from a SharePoint Server 2010 content database in the modern UI returns a RequestNotSupported Colbalt error.

  • Fixes an issue where selecting New in a form library opens a file upload dialog instead of the InfoPath client.

  • Fixes an issue where selecting an existing form in a library configured for OpenInClient fails to launch InfoPath and reports that Office does not recognize the supplied command.

The following fixes require both the language-dependent update KB 5002110 and the main update KB 5002111:

  • Fixes an issue where the More options button cannot be reached using the keyboard at 400 percent zoom.

  • Fixes an issue where the tick button in the attachments edit field has no defined Name list web part.

  • Fixes an issue where PowerShell help lists inconsistent parameter names for Export-SPCertificate.

  • Changes the capitalization of the word database in the PowerShell descriptions of Add-SPShellAdmin, Get-SPShellAdmin, and Remove-SPShellAdmin.

Comments are closed.