Updates for SharePoint Server Subscription Edition (December 2021 CU)

19 December 2021    |    Comments   Comments: 0

A new cumulative update (December 2021 CU) has been released for SharePoint Server Subscription Edition.

SP Build:
16.0.14326.20620 (Language independent CU)
16.0.14326.20620 (Language dependent CU)

SharePoint Subscription Edition CU – KB articles describing the CU:

  • KB 5002045 – December 2021 Update for SharePoint Server Subscription Edition (language independent)
  • KB 5002047 – December 2021 Update for SharePoint Server Subscription Edition (language dependent)

SharePoint Server Subscription Edition CU – CU download links:

After installation, remember to run the SharePoint Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

Always install both packages in this order:

  1. language independent components (core CU)
  2. language-dependent components (language CU)

For language-dependent packages, the language you select does not matter because each package contains updates for all languages.

If you install a new language pack on a SharePoint Server Subscription Edition farm, you must reinstall the language-dependent update afterwards.

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server Subscription Edition

The security fixes in KB5002045 address remote code execution and spoofing vulnerabilities in Microsoft SharePoint Server. The associated advisories are CVE-2021-42294, CVE-2021-42309, CVE-2021-42320, CVE-2021-43242.

KB5002047 addresses a remote code execution vulnerability in Microsoft SharePoint Server, documented in CVE-2021-42294.

The following fixes are included in the language-independent update KB5002045:

  • Fixes an issue where double-clicking the Issues list in the asset picker fails with Exception from HRESULT: 0x80131904.

  • Fixes an issue where restoring a search service application fails with the error Type not allowed.

  • Fixes an issue where a failed attempt to add a user to a group on a modern team site produces the error No UI.

  • Fixes an issue where a null string unexpectedly matches a registered issue name.

  • Fixes an issue where sites originally created in Microsoft SharePoint Server 2007 cannot be imported with Import-SPWeb.

  • Fixes an issue where SharePoint home page search results show an incorrect icon for OneNote (.one) files.

  • Fixes an issue where a document library appears empty in the modern UI when its URL includes Unicode characters.

  • Fixes an issue where the DetailsList component has invalid values in a list on a modern team site or a communication site.

  • Fixes an issue where issue buttons in a communication site’s sharing panel have invalid values.

  • Fixes an issue where a modern team site’s left navigation has a drop-down button without an associated label.

  • Fixes an issue where the Hero web part on a communication site has invalid values.

  • Fixes an issue where a link in the Quick Links web part ignores system settings when high contrast mode is active.

  • Fixes an issue where choosing to uninstall or change Microsoft SharePoint Server Subscription Edition in Control Panel’s Programs and Features opens no confirmation dialog. With the update installed, either action prompts the user to confirm it.

  • Fixes an issue where the focus indicator is invisible when Create a site is selected on a modern team site in high contrast mode.

  • Fixes an issue where a screen reader provides no announcement when a user relying on assistive technology navigates to the search box on the Site Contents page.

The following changes require both the language-independent KB5002045 and the language-dependent KB5002047 to take full effect:

  • Adds a Timer job that finds and repairs inconsistencies in content databases within the SharePoint Server configuration.

  • Fixes an issue where the required and optional parameters of New-SPCertificate are not identified accurately.

  • Fixes an issue where the Follow status is missing from the classic view.

Comments are closed.