Updates for SharePoint Server 2019 (October 2022 CU)

16.10.2022    |    komentáře   komentářů: 0

A new cumulative update (October 2022 CU) has been released for SharePoint Server 2019.

SP Build:
16.0.10391.20000 (Language independent CU)
16.0.10391.20000 (Language dependent CU)

SharePoint 2019 CU – KB articles describing the CU:

  • KB 5002278 – October 2022 Update for SharePoint Server 2019 (language independent)
  • KB 5002277 – October 2022 Update for SharePoint Server 2019 (language dependent)

SharePoint Server 2019 CU – CU download links:

After installation, remember to run the SharePoint 2019 Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

Always install both packages in this order:

  1. language independent components (core CU)
  2. language-dependent components (language CU)

For language-dependent packages, the language you select does not matter because each package contains updates for all languages.

If you install a new language pack on a SharePoint Server 2019 farm, you must reinstall the language-dependent update afterwards.

Remember to keep Distributed Cache updated as well as SharePoint. See How to update Distributed Cache correctly (in Czech).

Note for this CU:

Installation requires the release version of SharePoint Server 2019.

The language-dependent update requires SharePoint Server 2019 and may require a computer restart after installation.

Some SharePoint 2010 workflow scenarios can be blocked, with ULS event tag 6ksbk. See KB5020238.

Workflow .xoml files must use UTF-8. SharePoint Designer, Visual Studio and Nintex already produce this encoding by default; the issue affects files manually converted to another encoding. Convert affected files back to UTF-8, declare UTF-8 in the XML declaration, save them in UTF-8 and redeploy them. The KB provides a SharePoint Management Shell scanning script: IsGoodWorkflow is True for compatible UTF-8 files and False for files that need modification.

Deleting a web application can fail. See KB5031287.

A new farm with October 2022 or later updates slipstreamed into its base build can encounter this failure when using the least-privileged model: the application pool account cannot be added to the Admin content database’s WSS_CONTENT_APPLICATION_POOLS role, and deletion reports denied DELETE permission on dbo.SiteCounts in SharePoint_Config. After running the SharePoint Configuration Wizard (psconfig) on the first farm server, but before the Farm Configuration Wizard or provisioning more components, run:

Get-SPDatabase | %{$_.GrantOwnerAccessToDatabaseAccount()}

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server 2019

  • The update addresses a SharePoint Server remote code execution vulnerability tracked as CVE-2022-41036.

  • The update addresses a SharePoint Server remote code execution vulnerability tracked as CVE-2022-41037.

  • The update addresses a SharePoint Server remote code execution vulnerability tracked as CVE-2022-41038.

  • The update addresses a SharePoint Server remote code execution vulnerability tracked as CVE-2022-38053.

The update includes these SharePoint Server 2019 changes:

  • Creating an item in the list view of a classic document library web part could show its content types incorrectly when Office Online Server was configured.

  • The least-privileged SQL Server configuration for the SharePoint farm service account is improved.

  • Tree view could prevent selection of a folder whose name contained #.

  • A new UPA timer job, User Profile to SharePoint Synchronization for Groups, propagates email and display-name changes from the User Profile Application to the content database, keeping website information aligned with Active Directory. Enabling this feature requires both KB 5002277 and KB 5002278.

Komentáře