Description of the security update for SharePoint Enterprise Server 2013: September 11, 2018

2020-04-13T02:04:31
ID KB4092470
Type mskb
Reporter Microsoft
Modified 2020-04-16T08:38:15

Description

<html><body><p>Description of the security update for SharePoint Enterprise Server 2013: September 11, 2018.</p><h2>Summary</h2><div><p>This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see <a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8426">Microsoft Common Vulnerabilities and Exposures CVE-2018-8426</a>, <a data-content-id="" data-content-type="" href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8428" target="_blank">Microsoft Common Vulnerabilities and Exposures CVE-2018-8428</a>, and <a data-content-id="" data-content-type="" href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8431" target="_blank">Microsoft Common Vulnerabilities and Exposures CVE-2018-8431</a>.<br/><br/><strong>Note</strong> To apply this security update, you must have the release version of <a href="http://support.microsoft.com/kb/2880552">Service Pack 1 for Microsoft SharePoint Server 2013</a> installed on the computer.</p></div><h2>Improvements and fixes</h2><p>This security update contains improvements and fixes for the following nonsecurity issue:</p><p class="indent-1">Assume that you set Managed Navigation for a subsite. When you navigate to a page on the subsite through the friendly URL of its term, the query variable {Page} or {Page.URL} returns an invalid URL for the page.</p><h2>Known issues in this security update</h2><p>When you try to move document sets to a records center after applying KB4092470, you may see an unexpected error. To resolve this issue, install the <a data-content-id="" data-content-type="" href="http://support.microsoft.com/kb/4461458" managed-link="" originalsrc="https://support.microsoft.com/en-us/help/4461458/october-9-2018-cumulative-update-for-sharepoint-enterprise-server-2013" shash="jWD8putBaeN+FMkY9UKnp6Z5QMsIfIddjxBdStsd6yWKNOzPhQubYC93H6fLTxKKHpqcIwXSi15QP5bbpK3hHWnqFwdvr/5pGqOrKyO1tP7+STrJJZxQc2GSno+B5Uoha2ZAZZz3aRZIt3gmVksT2S9T13R31SthM67xF8f1MI8=" target="">October 9, 2018, cumulative update for SharePoint Enterprise Server 2013 (KB4461458)</a>.</p><h2>How to get and install the update</h2><h3>Method 1: Microsoft Update</h3><p>This update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see <a bookmark-id="" data-content-id="" data-content-type="" href="https://support.microsoft.com/en-us/help/12373/windows-update-faq" managed-link="" target="">Windows Update: FAQ</a>.</p><h3>Method 2: Microsoft Update Catalog</h3><p>To get the stand-alone package for this update, go to the <a bookmark-id="" data-content-id="" data-content-type="" href="http://www.catalog.update.microsoft.com/Search.aspx?q=KB4092470" managed-link="" target="">Microsoft Update Catalog</a> website.</p><h3>Method 3: Microsoft Download Center</h3><p>You can get the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.</p><ul linespacing="1" style="list-style-type:UnorderedBullets" type="UnorderedBullets"><li><span asset="4009805" contenteditable="false" props='{"size":"full"}' unselectable="on">4009805</span><a bookmark-id="" data-content-id="" href="http://www.microsoft.com/download/details.aspx?familyid=d398c474-3d51-476a-8f14-69d8433d60e4" managed-link="">Download security update KB4092470 for the 64-bit version of SharePoint Enterprise Server 2013</a></li></ul><h2>More Information</h2><h3>Security update deployment information</h3><p>For deployment information about this update, see <a href="https://support.microsoft.com/en-us/help/20180911">security update deployment information: September 11, 2018</a>.</p><h3>Security update replacement information</h3><p>This security update replaces previously released security update <a bookmark-id="" data-content-id="" data-content-type="" href="http://support.microsoft.com/kb/4022235" managed-link="" target="">KB4022235</a>.</p><h3>File hash information</h3><table class="table"><tbody><tr><th>File name</th><th>SHA1 hash</th><th>SHA256 hash</th></tr><tr><td>coreserverloc2013-kb4092470-fullfile-x64-glb.exe</td><td>6AE1A40175CC8B0FB0FD84B759CF73BDF01EF4C4</td><td>D1A0E38DE9545DEB1EF3FEB1845AACA7EC12A1D1A9CCE824A6FB9C802A3D57DD</td></tr></tbody></table><h3><br/>File information</h3><p>For the list of files that are included in the security update 4092470, download the <a data-content-id="" data-content-type="" href="http://download.microsoft.com/download/6/F/F/6FFD3876-580D-4057-A907-13064C95B36F/4092470.csv" managed-link="" target="_blank">file information</a>.</p><h2>How to get help and support for this security update</h2><p>Help for installing updates: <a bookmark-id="" data-content-id="" data-content-type="" href="https://support.microsoft.com/ph/6527" managed-link="" target="">Windows Update: FAQ</a></p><p>Help for protecting your Windows-based computer from viruses and malware: <a bookmark-id="" data-content-id="" data-content-type="" href="https://support.microsoft.com/contactus/cu_sc_virsec_master" managed-link="" target="">Microsoft Secure</a></p><p>Local support according to your country: <a bookmark-id="" data-content-id="" data-content-type="" href="https://www.microsoft.com/en-us/locale.aspx" managed-link="" target="">International Support</a></p></body></html>