Updates for SharePoint Server Subscription Edition (September 2022 CU)

18 September 2022    |    Comments   Comments: 0

A new cumulative update (September 2022 CU) has been released for SharePoint Server Subscription Edition.

SP Build:
16.0.15601.20052 (Language independent CU)
16.0.15601.20052 (Language dependent CU)

SharePoint Subscription Edition CU – KB articles describing the CU:

  • KB 5002271 – September 2022 Update for SharePoint Server Subscription Edition (language independent)
  • KB 5002270 – September 2022 Update for SharePoint Server Subscription Edition (language dependent)

SharePoint Server Subscription Edition CU – CU download links:

After installation, remember to run the SharePoint Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

Always install both packages in this order:

  1. language independent components (core CU)
  2. language-dependent components (language CU)

For language-dependent packages, the language you select does not matter because each package contains updates for all languages.

If you install a new language pack on a SharePoint Server Subscription Edition farm, you must reinstall the language-dependent update afterwards.

Note for this CU:

Both packages require the release version of Microsoft SharePoint Server Subscription Edition to be installed.

Some Web Part Pages Web Service methods may be blocked after installation. KB5017733 explains how to identify affected controls and review them before allowing property traversal.

Some SharePoint 2010 workflows may be blocked by the enhanced security policy. Review KB5017760 before authorizing additional workflow types.

Nintex Workflow Document Generation users must perform the additional steps linked by Microsoft after installing this update so workflows can be published and run. Contact Nintex for support.

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server Subscription Edition

KB 5002271 fixes SharePoint remote code execution vulnerabilities: CVE-2022-37961, CVE-2022-38008, CVE-2022-38009, CVE-2022-35823. The language update KB 5002270 also fixes CVE-2022-38008.

The main update, KB 5002271, includes these SharePoint Server changes:

  • Introduces the Version 22H2 feature update, which is also included in subsequent SharePoint Server Subscription Edition public updates. KB 5002270 includes this feature update as well.

  • Fixes an issue where arrow keys cannot access tab items.

  • Fixes an issue where a screen reader omits the dialog role.

  • Fixes an issue where Create Site lacks visible Required field text and screen-reader support for it.

  • Fixes an issue where Set-SPEnterpriseSearchFileFormatState disables the built-in IFilter.

  • Fixes an issue where a full-width section containing an image prevents scrolling down in the modern mobile view.

  • Fixes an issue where modern page version history appears incorrectly.

  • Fixes an issue where modern site content shows only one SharePoint Framework (SPFx) web part.

  • Fixes an issue where refreshing a team site page in edit mode hides the Suite Navigation bar.

The following new feature requires both KB 5002271 and language update KB 5002270:

  • Adds the User Profile to SharePoint Synchronization for Groups timer job to the User Profile Application (UPA). It transfers changed group email addresses and display names from UPA to the content database, keeping site information consistent with Active Directory.

Fixes for other components (requirements are stated with each fix):

  • Project Server Subscription Edition, KB 5002271: Adds security improvements.

Comments are closed.