Updates for SharePoint Server Subscription Edition (November 2022 CU)

13 November 2022    |    Comments   Comments: 0

A new cumulative update (November 2022 CU) has been released for SharePoint Server Subscription Edition.

SP Build:
16.0.15601.20238 (Language independent CU)
16.0.15601.20238 (Language dependent CU)

SharePoint Subscription Edition CU – KB articles describing the CU:

  • KB 5002296 – November 2022 Update for SharePoint Server Subscription Edition (language independent)
  • KB 5002291 – November 2022 Update for SharePoint Server Subscription Edition (language dependent)

SharePoint Server Subscription Edition CU – CU download links:

After installation, remember to run the SharePoint Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

Always install both packages in this order:

  1. language independent components (core CU)
  2. language-dependent components (language CU)

For language-dependent packages, the language you select does not matter because each package contains updates for all languages.

If you install a new language pack on a SharePoint Server Subscription Edition farm, you must reinstall the language-dependent update afterwards.

Note for this CU:

Both updates require the release version of Microsoft SharePoint Server Subscription Edition to be installed.

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server Subscription Edition

The main update KB 5002296 addresses remote code execution in Word and SharePoint Server and information disclosure in Word: CVE-2022-41061, CVE-2022-41062, CVE-2022-41103.

The language update KB 5002291 addresses Word remote code execution and information disclosure: CVE-2022-41060, CVE-2022-41061, CVE-2022-41103.

The main update, KB 5002296, includes these SharePoint Server fixes:

  • Fixes an issue where navigating between two lists prevents a list property value from being updated.

  • Fixes an issue where SharePoint Search ignores a document’s title when detecting its language if the document content is empty.

Fixes for other components (requirements are stated with each fix):

  • Project Server, KB 5002296: Fixes an issue where a project cannot be checked in after editing it in Project Web App (PWA) with a Content Editor web part on its Project Detail Page (PDP), if the page’s security validation expires during editing. Closing and checking in the project previously left a persistent Processing notification. It now reports the validation timeout and instructs the user to go Back in the browser, refresh the page, and retry.

  • Project Server, KB 5002296: Fixes an issue where voice control cannot access the View, Filter, and Group By buttons on PWA pages such as Project Center.

Comments are closed.