Cumulative Update 41 for Microsoft Dynamics 365 Business Central April'19 on-premises (Application Build 14.42.49347, Platform Build 14.0.49339)

This update does not require database conversion from previous version. There is no changes to Platform, so this cumulative update contains only small bugfixes to Application layer. Table 81 contains now a new function "CalculateVATAmount", which adds stability to VAT allocations calculation.

This update addresses an information disclosure vulnerability in NAV and BC environments. The Microsoft CVE for the issue can be found from  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41066 and MS recommends that all supported NAV and BC versions are update with this update. Currently supported versions are NAV2018, BC14 and BC19-21. Today (2022-11-29) MS has not released a fix for versions outside the mainstream support, so this vulnerability has been addressed as low priority one.

Application changelog is 45KB, and there is total 18 changed objects, with most changes to 11 Codeunits. Biggest part of the changes are done to VAT handling and Consumption journal that now tries to find out what was the last Journal Batch used.

Picture 1, changed objects

Since there was not much of interesting patterns, changes or procedures, this blog was really short - again. Business Central 14 has now less than year left of mainstream support, so I am not expecting to see much interesting changes with C/AL environments anymore. I will, however, keep blogging about these changes as long as there is public interest left. So far there has been constant stream of readers, so maybe there is still some interest left!
It is possible that I will concentrate more on AL and PowerShell functionalities later, but we will see.

Other issues of interest

While writing this Directions EMEA is running in Hamburg. I am excited to hear the news from my colleagues.
For more information, visit Directions EMEA website: https://directions4partners.com/events/directions-emea-2022/

Best regards,
Urpo

EDIT 2022-11-29: Added CVE-2022-41066 information