Updates for SharePoint Server 2016 (December 2021 CU)

19.12.2021    |    komentáře   komentářů: 0

A new cumulative update (December 2021 CU) has been released for SharePoint Server 2016.

This CU includes Feature Pack 1 (December 2016 CU) and Feature Pack 2 (September 2017 CU).

SP Build:
16.0.5254.1000 (Language independent CU)
16.0.5254.1000 (Language dependent CU)

SharePoint 2016 CU – KB articles describing the CU:

  • KB 5002055 – December 2021 Update for SharePoint Server 2016 (language independent)
  • KB 5002059 – December 2021 Update for SharePoint Server 2016 (language dependent)

SharePoint Server 2016 CU – CU download links:

After installation, remember to run the SharePoint 2016 Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

Always install both packages in this order:

  1. language independent components (core CU)
  2. language-dependent components (language CU)

For language-dependent packages, the language you select does not matter because each package contains updates for all languages.

If you install a new language pack on a SharePoint Server 2016 farm, you must reinstall the language-dependent update afterwards.

Remember to keep Distributed Cache updated as well as SharePoint. See How to update Distributed Cache correctly (in Czech).

Note for this CU:

Both updates require the release version of SharePoint Enterprise Server 2016 to be installed.

The modern OneDrive for Business experience may be enabled only while a Software Assurance contract is active, whether enablement occurs during update installation or manually. If no active contract exists at that time, the modern experience must be turned off.

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server 2016

The language-independent update KB 5002055 addresses remote code execution and spoofing vulnerabilities in SharePoint Server. Its security advisories are CVE-2021-42294, CVE-2021-42309, CVE-2021-42320, CVE-2021-43242.

The language-dependent update KB 5002059 addresses a SharePoint Server remote code execution vulnerability tracked as CVE-2021-42294.

The language-independent update KB 5002055 includes these SharePoint Server 2016 fixes:

  • Fixes an issue where SharePoint Server 2016 PowerShell fails to perform the expected operations when using Update-SPMachineKey and Set-SPMachineKey.

  • Fixes an issue where restoring a search service application fails with the error "Type not allowed" after the May 2021 SharePoint Server updates have been installed.

The following search fix requires both KB 5002055 (language-independent) and KB 5002059 (language-dependent):

  • Fixes an issue where search stops returning results for queries that restrict a property using the equals operator, for example title=R123.

Komentáře