Updates for SharePoint Server Subscription Edition (December 2022 CU)

18 December 2022    |    Comments   Comments: 0

A new cumulative update (December 2022 CU) has been released for SharePoint Server Subscription Edition.

SP Build:
16.0.15601.20316 (Language independent CU)

SharePoint Subscription Edition CU – KB articles describing the CU:

  • KB 5002327 – December 2022 Update for SharePoint Server Subscription Edition (language independent)
  • No new language-dependent package was released for this CU. Use the latest available language CU: KB 5002291 (November 2022 CU).

SharePoint Server Subscription Edition CU – CU download links:

After installation, remember to run the SharePoint Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

Always install both packages in this order:

  1. language independent components (core CU for this release)
  2. language-dependent components (latest available language CU: KB 5002291, November 2022 CU)

For language-dependent packages, the language you select does not matter because each package contains updates for all languages.

If you install a new language pack on a SharePoint Server Subscription Edition farm, you must reinstall the language-dependent update afterwards.

Note for this CU:

KB 5002327 requires the release version of Microsoft SharePoint Server Subscription Edition to be installed.

A SharePoint site may become inaccessible if its URL ends in a string matching a file extension blocked by that web application. KB5023406 describes the invalid-URL error and identifies February 2023 KB 5002353 as the fix for Subscription Edition.

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server Subscription Edition

KB 5002327 fixes SharePoint Server remote code execution vulnerabilities CVE-2022-44690 and CVE-2022-44693.

The main update, KB 5002327, includes these SharePoint Server changes:

  • Fixes an issue where a URL created by Get a link in the classic experience redirects to the default zone.

  • Fixes an issue where the Active Directory profile import timer job fails to synchronize the assistant property.

  • Fixes an issue where adding an alternative condition in the New Query Rule interface disables the End of query matches option.

  • Fixes an issue where a lookup field’s DateTime filter fails when the regional setting uses a region other than the US.

  • Fixes an issue where a key collision in the User Profile to SharePoint Synchronization for Groups timer job prevents automatic updates to the group name in Active Directory.

  • Enables secure access to WorkflowTaskPane.aspx.

Fixes for other components (requirements are stated with each fix):

  • Project Server, KB 5002327: Fixes an issue where selecting an item with the keyboard from the View, Filter, or Group by menu loses keyboard focus on PWA pages such as Project Center.

Comments are closed.