Updates for SharePoint Server Subscription Edition (October 2022 CU)

16 October 2022    |    Comments   Comments: 0

A new cumulative update (October 2022 CU) has been released for SharePoint Server Subscription Edition.

SP Build:
16.0.15601.20158 (Language independent CU)

SharePoint Subscription Edition CU – KB articles describing the CU:

  • KB 5002290 – October 2022 Update for SharePoint Server Subscription Edition (language independent)
  • No new language-dependent package was released for this CU. Use the latest available language CU: KB 5002270 (September 2022 CU).

SharePoint Server Subscription Edition CU – CU download links:

After installation, remember to run the SharePoint Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

Always install both packages in this order:

  1. language independent components (core CU for this release)
  2. language-dependent components (latest available language CU: KB 5002270, September 2022 CU)

For language-dependent packages, the language you select does not matter because each package contains updates for all languages.

If you install a new language pack on a SharePoint Server Subscription Edition farm, you must reinstall the language-dependent update afterwards.

Note for this CU:

KB 5002290 requires the release version of Microsoft SharePoint Server Subscription Edition to be installed.

Some SharePoint 2010 workflows may be blocked, with 6ksbk events in the ULS log. KB5020238 explains that workflow .xoml files must use UTF-8. If a file was manually converted to another encoding, restore UTF-8 in both its XML declaration and saved file, then redeploy it.

Deleting a web application may fail. KB5031287 identifies newly deployed farms with October 2022 or later updates slipstreamed into the base build and the least-privileged security model. The workaround grants the required database permissions after the SharePoint Configuration Wizard has run on the first farm server, but before the Farm Configuration Wizard or provisioning additional components:

Get-SPDatabase | %{$_.GrantOwnerAccessToDatabaseAccount()}

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server Subscription Edition

KB 5002290 fixes SharePoint Server remote code execution vulnerabilities documented in CVE-2022-41036, CVE-2022-41037, CVE-2022-41038, CVE-2022-38053.

The main update, KB 5002290, contains the following changes:

  • Fixes an issue where creating an item in the list view of a classic document library web part shows incorrect item content types when Office Online Server is configured.

  • Fixes an issue where classic team sites request sign-in despite anonymous access being enabled.

  • Fixes an issue where team site page content is clipped at 400 percent zoom with a 1280*1024 display resolution.

  • Fixes an issue where applying text spacing clips content in the home page activity web part.

  • Fixes an issue where Tree view cannot select a folder whose name contains #.

  • Fixes an issue where a web view link cannot open Microsoft OneNote.

  • Fixes an issue where the Header section clips the keyboard focus indicator.

  • Improves the least-privileged SQL Server configuration for the SharePoint farm service account.

  • Adds support for multiple client identifiers in an OIDC-enabled SPTrustedIdentityTokenIssuer. Configuration example:

    Set-SPTrustedIdentityTokenIssuer -Identity <name> -ScopedClientIdentifier Dictionary<Uri,string> -IsOpenIDConnect

Comments are closed.