News

January Security Patch Can Break SharePoint 2013

Update: Today, Microsoft's Stefan Gossner described a workaround by installing patch KB3114508, released on Jan. 5. Klindt, in an update to his blog post, explained that it was an "individual patch from the Foundation CU that fixes" the problem. However, he noted that the patch should be tested first, as it can't be uninstalled.

 

A January security update from Microsoft apparently is adversely affecting some SharePoint Server 2013 deployments.

Microsoft MVP Todd Klindt singled out MS16-004 (KB3124585) as the culprit in a blog post today. It's a security update that patches a remote code execution flaw in Microsoft Office and SharePoint Server 2013.

The problem shows up for SharePoint Server 2013 environments as a "TypeError" notice, according to a Microsoft user forum cited by Klindt. So far, though, there's been no notice from Microsoft about the problem.

Klindt explained the patch as just being an issue just for those organizations that have enabled automatic updates via Windows Update for SharePoint Server 2013 environments, which he characterized as a not recommended practice. The issue specifically affects organizations that "did not install the full January 2016 SharePoint CU," he added.

"It seems people that installed KB3124585 from Windows Update, but did not install the full January 2016 SharePoint CU are having problems," Klindt wrote.

Microsoft released cumulative updates (CUs) for SharePoint Server 2013 and SharePoint Server 2010 on Jan. 12, the same day as its January security update releases.

There's no rollback for those experiencing the problem. That's one of the reasons why Klindt advises against enabling automatic updates for SharePoint Server via Windows Update. Instead, Klindt indicated that applying the January CU for SharePoint Foundation will fix the problem. However, that action, too, is irreversible should something go wrong, he noted.

About the Author

Kurt Mackie is senior news producer for the 1105 Enterprise Computing Group.

Featured

  • Insights for MyAnalytics Getting Switched On for Office 365 Users This Month

    Microsoft is planning to activate "Insights for MyAnalytics" sometime late this month for most Office 365 users, but the ability of organizations to manage this feature won't be available until possibly mid-May.

  • SharePoint Framework 1.8 Now Generally Available

    Microsoft this week announced that SharePoint Framework 1.8 had reached "general availability" status, although some features are still at the preview stage.

  • How To Create Office 365 User Accounts in Bulk

    Manual account creation can be tedious, time-consuming and prone to human error, especially if you have more than a handful of Office 365 users to set up. Brien shows you a better way.

  • System Center 2019 Reaches General Availability

    System Center 2019 has now reached the "general availability" product stage, Microsoft indicated in a Thursday update.

comments powered by Disqus

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.