Updates for SharePoint Server Subscription Edition (February 2022 CU)

13 February 2022    |    Comments   Comments: 0

A new cumulative update (February 2022 CU) has been released for SharePoint Server Subscription Edition.

SP Build:
16.0.14326.20742 (Language independent CU)

SharePoint Subscription Edition CU – KB articles describing the CU:

  • KB 5002145 – February 2022 Update for SharePoint Server Subscription Edition (language independent)
  • No new language-dependent package was released for this CU. Use the latest available language CU: KB 5002110 (January 2022 CU).

SharePoint Server Subscription Edition CU – CU download links:

After installation, remember to run the SharePoint Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

Always install both packages in this order:

  1. language independent components (core CU for this release)
  2. language-dependent components (latest available language CU: KB 5002110, January 2022 CU)

For language-dependent packages, the language you select does not matter because each package contains updates for all languages.

If you install a new language pack on a SharePoint Server Subscription Edition farm, you must reinstall the language-dependent update afterwards.

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server Subscription Edition

KB 5002145 addresses SharePoint Server vulnerabilities involving remote code execution, spoofing, and bypass of security features. The relevant advisories are CVE-2022-22005, CVE-2022-21987, and CVE-2022-21968.

The main update KB 5002145 includes the following SharePoint Server fixes:

  • Fixes an issue where uploading a file item that exceeds the threshold produces a broken icon.

  • Fixes an issue where configuring a retention policy for a web application with no policy center site collection incorrectly reports that the site retention policy cannot be checked. The message is corrected to identify the missing policy center.

Fixes for other components (requirements are stated with each fix):

  • Project Server (KB 5002145): Fixes an issue where reporting retains the original Status Manager after a task’s manager is set and the project is published, then changed to another manager and published again within the same editing session.

Comments are closed.