Description of the security update for SharePoint Server 2019: April 14, 2020

This security update contains improvements and fixes for the following nonsecurity issues in SharePoint Server 2019:

• Adds a new NumeralFormat parameter for Word Automation Services conversion jobs that enable the job to specify numeral formatting as Arabic, Hindi, or Context.
  • "Arabic": Numbers will be shown to have Arabic glyphs.
  • "Hindi": Numbers will be shown to have Hindi glyphs.

  • "Context ": Numbers will be shown to have glyphs that are appropriate for the surrounding run of text (either Arabic or Hindi).

• Because Brazil no longer observes daylight saving time, date and time values are displayed incorrectly for list items in site collections that use the "(UTC-03:00) Brasilia" and "(UTC-04:00) Cuiaba" time zones.
• When on-premises servers use Azure AD for SAML-based authentication, the authentication fails because the trusted issuer on the SharePoint on-premises server appends an at sign (@), and the issuer claim in the token doesn't include the at sign. 
• Mixtures of Traditional Chinese and other text are not handled correctly by the Chinese Traditional Word Breaker.

This security update contains fixes for the following issues in Project Server 2019:

• Querying for a task dependency through the client-side object model (CSOM) returns a non-elapsed LinkLagDuration string for elapsed values. For example, you have a dependency that says 2FS+1ed. Instead of returning the expected 1ed, it returns 3d.
• When accessing certain projects through the client-side object model (CSOM) or REST, the process fails because of overflow in the Schedule Variance Percentage (SVP) or Cost Variance Percentage (CVP) fields.
• Consider the following scenario:
  • You have server event code on the publishing event that extracts data from a project through the client-side object model (CSOM).
  • You open a project by using Project or Project Web App.
  • You make changes in the project.
  • You publish the project.

In this scenario, the publishing event code that reads the project data runs for more than a minute and then times out. Therefore, the event unexpectedly cancels the publishing job.

• If you apply a filter to a Tasks list, you don't see the expected result for those items (which are on the second and subsequent pages).