Description of the security update for SharePoint Server 2016: September 12, 2017

This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2017-8742.

Note To apply this security update, you must have the release version of SharePoint Server 2016 installed on the computer.

This public update delivers Feature Pack 2 for SharePoint Server 2016, which contains the following feature:

• SharePoint Framework (SPFx)

This public update also delivers all the features previously included in Feature Pack 1 for SharePoint Server 2016, including:

• Administrative Actions Logging
• MinRole enhancements
• SharePoint Custom Tiles
• Hybrid Auditing (preview)
• Hybrid Taxonomy
• OneDrive API for SharePoint on-premises
• OneDrive for Business modern experience (available to Software Assurance customers)

The OneDrive for Business modern user experience requires an active Software Assurance contract at the time that it is enabled, either by installation of the public update or by manual enablement. If you don't have an active Software Assurance contract at the time of enablement, you must turn off the OneDrive for Business modern user experience.

For more information, see New features included in the November 2016 Public Update for SharePoint Server 2016 (Feature Pack 1) and New features included in the September 2017 Public Update for SharePoint Server 2016 (Feature Pack 2).

This security update contains improvements and fixes for SharePoint Server 2016:
 

• Reduce the memory usage for dictionary compilation.

• You can't access a content type hub after the Hybrid Content Type feature is enabled.

• After you edit the recurrence count of an event series of a SharePoint calendar list, event ID 5214 is logged in the Application Event Log.

• You can now create and deploy Client-Side Web Parts to SharePoint On-Premises sites.

• Translate some terms in multiple languages to make sure that the meaning is accurate.

• Multiple properties in Microsoft Identity Manager (MIM) can't be updated at a same time by using existing update mechanisms. For example, the Assistant and Manager properties can't be updated at a same time.

• Custom properties of documents can now be mapped in the search schema. This update also increases PDF compatibility when indexing.

• In a trusted Security Assertion Markup Language (SAML) configuration, Office Web Apps Server flows and other OAuth-based flows don't work when certain claims aren't available in the token. For example, when you sign in to a web application that uses AD FS authentication, you can't open a file for which you have permissions granted through an AD security group membership in the browser (Office Web Apps Server Server).

• If a page doesn't have a published version, the variation page creates a page that has version "1.511" rather than the expected version of "0.1" in the target labels.

• You can't access the SharePoint Admin site after you create a farm.

• When you select to show more posts on MySite host, some feeds may be missing.

• In a multi-tenant configuration, the People Picker will respect the tenant (subscription) property (UserAccountDirectoryPath) for search and resolve operations. Therefore, the resolve operation will not find a user in another organization unit.

• Farm administrators can now add and remove other users from the User Profile Service Application administration.

• When you try to upload files to a folder that has Swedish characters, you receive the following error message:

  Sorry, something went wrong. The file or folder name "FolderName" contains invalid characters. Please use a different name.