MS15-110: Security Updates for Microsoft Office to address remote code execution: October 13, 2015

• Translates some terms in multiple languages to make sure that the meaning is correct.
  
• This update changes the way temporary file names are generated for features such as opening read-only files from UNC shared folders, sending workbooks as email attachments, and interacting with shared workbooks. This makes sure that the correct operation occurs when many temporary files are created and opened.
  
• This update contains fixes for the following nonsecurity issues:
  
  • When you create a SharePoint site by using a saved template that has a site feed Web Part, you experience the following issues:
    
    • Post to the site feed Web Part isn't displayed in the search result.
    • If you search for text in the posts, the results are not displayed as conversations.
    • If a post has hash tags, the tags never are counted in trending tags, and the post is not displayed on the hash-tag profile page.
  • When you create a site that is based on a site template that has the Community Site feature enabled, you can't see communities, and you receive the following error message:
    
    Cannot complete this action. Please try again.
    This update disables the option to Save site as a template for a site that has the Community Site feature enabled.
    
  • If a document set has a shared field of the SharePoint integer type, the value of the field isn't propagated to documents inside the document set.
    
  • When you receive a message about a discussion list, the author of the post isn't displayed.
    
  • Invalid XML in CMIS fields doesn't ignore browser processing as expected.
    
  • Site-deleting notification displays an incorrect date if the site regional setting locale isn't set to en-us.
    
  • When you create a document set, all entered data is lost if a field validation fails.
    
  • If an app that has a feature is used on a source label, new variation labels can't be created because the variation to create a hierarchies job fails.
    
  • Incremental crawls on certain crawl sources cause sustained high CPU usage and gradually increasing memory consumption.
    
  • When you use managed metadata navigation and filtering, the halo around the active item on the menu is truncated, and the separator of the navigation bar is displayed with an inconsistent width.
    
  • Created and changed dates are displayed incorrectly for documents in a document set that are moved to the Drop Off library of a Records Center site.
    
  • When you try to create a page by using a name that contains a space, you receive an error message that states that the special characters aren't allowed.
    
  • Lync and Skype of Business presence doesn't work on the "people search" results page in the SharePoint Server 2013 search center.
    
  • Product names such as Word and Excel are translated in the search result page of the search center in the Finnish language.
    
  • Fixes the following issues in the Azure plugin in the hybrid crawler:
    
    • Sends headers with additional information to secure cloud services (SCS).
    • Fixes Azure plugin freezes because of status change (pause or resume).
    • Fixes the spoindextypename value.
  • The exception in UrlMapper.RefreshCache may cause the w3wp.exe process to crash. You can't access the site, and data loss occurs.
    
  • You can't use the ManagedProperty.Update method to update the UseAAMMapping property.
    
  • You can't access a document by using a DocID URL on mobile devices. For example, a DocID URL resembles the following:
    
    https://contoso.com/_layouts/15/DocIdRedir.aspx?ID=xxxx
  • REST query fails if a post contains an image without any associated text. For example, you can't access a newsfeed, and you receive the following error message when you send a REST query:
    
    The server encountered an error processing the request. See server logs for more details.
  • Welcome email is not sent to users when the user who creates the invitation is not the owner, and no message is entered in the optional message text box.
    
  • When you create a document set, all entered data is lost if a field validation fails.
    
  • After you select Cancel on the Edit Properties page of a publishing page, you are redirected to the document library but not the page.
    
  • Incremental crawls on certain crawl sources cause sustained high CPU usage and gradually increasing memory consumption.
    
  • The WOPI Discovery Synchronization timer job is displayed as successful even if the job fails.
    
  • When you drag-and-drop files to a SharePoint site, the upload process may freeze after a brief period of inactivity.
    
  • When you restore or move a site collection to a different location, the URL of the site logo image isn't updated.
    
  • Custom CSS styles aren't displayed for the RichHtmlField control on ribbons.
    
  • After you migrate from SharePoint Server 2010 to SharePoint Server 2013, you can't access workflows of a list to start a new workflow or check the status of existing instances for SharePoint Server 2010 workflows.
    
  • When you try to access a list for which you don't have access permissions, you expect to receive an access denied error message. Instead, you receive the following error message:
    
    The "ListViewWebPart" Web Part appears to be causing a problem. Object reference not set to an instance of an object.
    
    
  • After you restore or copy a site collection, the URL of the navigation node is invalid.
    
  • After you use the Copy-SPSite cmdlet to synchronize a newly created site collection, you can't use OneDrive for Business to synchronize an old site collection.
    
    Note To resolve this issue, you also have to apply September 16, 2014 update for OneDrive for Business (KB2889931) .
    
  • You cannot attach any files to list items in a SharePoint Server 2013 site. The operation fails, and you receive with a message that states that the path contains invalid characters.
    
  • After you move a chart from a worksheet to another worksheet in Excel 2010, alternative title and description are blank.
    
  • Hyperlinks that are created to local files in Visio 2010 don't work when the files are published to SharePoint.
    

The 2007 Microsoft Office system (all editions) and other software

Microsoft Office 2010 (all editions)

Microsoft Office 2013 (all editions)

Microsoft Office 2013 RT (all editions)

Microsoft Office 2016 (all editions)

Office for Mac 2011

• Mac OS X version 10.5.8 or later version on an Intel processor
• Mac OS X user accounts must have administrator privileges to install this security update
  

1. Close all applications, including virus-protection applications and all Microsoft Office applications, because they could interfere with the installation.
2. Open the Microsoft Office for Mac 2011 14.5.7 Update volume on your desktop. This step might have been performed for you.
3. To start the update process, in the Microsoft Office for Mac 2011 14.5.7 Update volume window, double-click the Microsoft Office for Mac 2011 14.5.7 Update application, and follow the instructions.
4. When the installation finishes successfully, you can remove the update installer from your hard disk. To verify that the installation finished successfully, see the "Verify update installation" section. To remove the update installer, first drag the Microsoft Office for Mac 2011 14.5.7 Update volume to the Trash, and then drag the file that you downloaded to the Trash.
   

1. In Finder, locate the Application Folder (Microsoft Office 2011).
2. Select Word, Excel, PowerPoint, or Outlook and start the application.
3. On the application menu, click About Application_Name (where Application_Name is Word, Excel, PowerPoint, or Outlook). If the Latest Installed Update Version number is 14.5.7, the update was successfully installed.
   
   

• Mac OS X Yosemite 10.10 or later version on an Intel processor
• A valid Microsoft Office 365 subscription.

1. Close all applications, including virus-protection applications and all Microsoft Office applications, because they could interfere with the installation.
2. Open the Microsoft Office 2016 for Mac 15.15.0 Update volume on your desktop. This step might have been performed for you.
3. To start the update process, in the Microsoft Office 2016 for Mac 15.15.0 Update volume window, double-click the Microsoft Office 2016 for Mac 15.15.0 Update application, and follow the instructions.
4. When the installation finishes successfully, you can remove the update installer from your hard disk. To verify that the installation finished successfully, see the "Verify update installation" section. To remove the update installer, first drag the Microsoft Office 2016 for Mac 15.15.0 Update volume to the Trash, and then drag the file that you downloaded to the Trash.

1. In Finder, locate the Application Folder (Microsoft Office 2016).
2. Select Word, Excel, PowerPoint, or Outlook and start the application.
3. On the application menu, click About Application_Name (where Application_Name is Word, Excel, PowerPoint, or Outlook). If the Latest Installed Update Version number is 15.15.0, the update was successfully installed.

Microsoft Office SharePoint Server 2007 (all editions) and Windows SharePoint Services 3.0 (all versions)

Microsoft SharePoint Server 2010 (all editions) and SharePoint Foundation 2010 (all versions)

Microsoft SharePoint Server 2013 (all editions) and SharePoint Foundation 2013 (all versions)

Microsoft Office Web Apps 2010 (all versions)

Microsoft Office Web Apps 2013 (all versions)