Cumulative hotfix for Sitecore XP 10.2


Description

The current article contains the latest version of the pre-release (hereinafter referred to as the hotfix) that includes all updates currently available for the Sitecore XP 10.2 version. Be aware that the hotfix was built for Sitecore XP 10.2 and must not be installed on other Sitecore XP versions. The hotfix can be applied both to XM and XP Sitecore Experience Platform topologies.

For more details about known issues fixed, refer to the Release notes section or to the "Sitecore 10.2.x rev. xxxxxx PRE/Documentation/Sitecore.Platform.Releasenotes 10.2.x rev. xxxxxx PRE.md" file found inside the hotfix package.

The latest hotfix package for Sitecore XP 10.2 can be downloaded from here: Sitecore 10.2.3 rev. 012476 PRE

 Important note:
Before applying the hotfix, check the corresponding Release notes in later updates available on https://dev.sitecore.net/ and make sure that your issue has not been fixed in the released updates. When fixed, upgrade your instance to the latest Sitecore XP 10.2.x minor update available.


If you are experiencing problems while upgrading the instance or installing the hotfix, contact Sitecore Support.

Solution

To resolve the issue, use one of the following solutions depending on your deployment:

Note that the latest version of a hotfix always includes all changes released in its previous versions. Therefore, the latest version of the hotfix can be installed on top of an earlier version of the hotfix for the same minor version of Sitecore XP. For example, you can safely install the "Sitecore 10.2.3 rev. 22222 PRE" version on top of the "Sitecore 10.2.3 rev. 11111 PRE".

Cumulative hotfix on top of any updates

A hotfix is installed on top of the initial release or any other update release. To install the hotfix:

  1. Download the latest hotfix package for Sitecore XP 10.2.
  2. Check the Sitecore 10.2.x rev. xxxxxx PRE/Documentation/Sitecore.Platform.Cumulative.Instructions 10.2.x rev. xxxxxx PRE.md file that can contain specific instructions if they are required.
  3. Install the hotfix from one of the following package folders depending on your deployment:
    • For on-prem, from the Sitecore 10.2.x rev. xxxxxx PRE/Platform Patch/OnPremCumulative folder.
    • For PaaS, from the Sitecore 10.2.x rev. xxxxxx PRE/Platform Patch/CloudCumulative folder.

For example:

Note that all release numbers are fictitious and are given as an example only.

 If the issue has not been fixed in Sitecore XP updates released on https://dev.sitecore.net/ (let's assume they are Sitecore XP 10.2.0-10.2.2), and at the same time, the issue has been fixed in the latest hotfix "Sitecore 10.2.3 rev. 333333 PRE":
  1. Download the hotfix package "Sitecore 10.2.3 rev. 333333 PRE".
  2. Check the "Sitecore 10.2.3 rev. 333333 PRE/Documentation/Sitecore.Platform.Cumulative.Instructions 10.2.3 rev. 333333 PRE.md" file that can contain specific instructions if they are required.
  3. Install the hotfix from "Sitecore 10.2.3 rev. 333333 PRE/Platform Patch/OnPremCumulative" on top of Sitecore XP 10.2.0, or XP 10.2.1, or XP 10.2.2 in case of on-prem solution.

 

Cumulative hotfix on top of the latest update

A hotfix is installed on top of the latest update release. To install the hotfix:

  1. Upgrade your instance to the latest Sitecore XP 10.2.x minor update available for Sitecore XP 10.2 on https://dev.sitecore.net/.
  2. Download the hotfix package for Sitecore XP 10.2.
  3. Check the Sitecore 10.2.x rev. xxxxxx PRE/Documentation/Sitecore.Platform.Instructions 10.2.x rev. xxxxxx PRE.md file that can contain specific instructions if they are required.
  4. Install the hotfix from one of the following package folders depending on your deployment:
    • For on-prem, from the Sitecore 10.2.x rev. xxxxxx PRE/Platform Patch/OnPrem folder.
    • For PaaS, from the Sitecore 10.2.x rev. xxxxxx PRE/Platform Patch/Cloud folder.

For example:

Note that all release numbers are fictitious and are given as an example only.

 

If the issue has not been fixed in Sitecore XP updates released on https://dev.sitecore.net/ (let's assume they are Sitecore XP 10.2.0-10.2.2), and at the same time, the issue has been fixed in the latest hotfix "Sitecore 10.2.3 rev. 333333 PRE", installation steps could be the following:

  1. Upgrade your instance to Sitecore XP 10.2.2 (the latest available minor update on https://dev.sitecore.net/) if you have not installed it before.
  2. Download the hotfix package "Sitecore 10.2.3 rev. 333333 PRE".
  3. Check the "Sitecore 10.2.3 rev. 333333/Documentation/Sitecore.Platform.Instructions 10.2.3 rev. 333333 PRE.md" file that can contain specific instructions if they are required.
  4. Install the hotfix from "Sitecore 10.2.3 rev. 333333 PRE/Platform Patch/Cloud" in case of PaaS solution.

 

Release notes

Refer to the tables below for issues resolved in this hotfix:

Fixes released after 10.2 Update-2 (10.2.2 rev. 010645):

Ref. IDDescription
PDXP-11391, PDXP-9109/619349, PDXP-7886, PDXP-7180, PDXP-5517/629358, PDXP-3377/604557, 628372, 617299, 604627, 594408, 584734, 552315, 548363, 539965, 539826, 533235, 531019, 525885, 525345, 525192, 504543, 492315, 483800, 390129, 92375Security enhancements
586965, 576798, 363636Security enhancements. These were implemented previously but were not documented; they are now listed below where they were implemented, and repeated here for awareness.
PDXP-5587Application tracking - Introduced a lightweight, secure tracking script to help us better understand how Sitecore’s management UIs are used. This will help us ensure future enhancements are guided by real-world usage patterns. No content, website data, or website visitor information is tracked. Tracking respects privacy settings and licensing controls.
624736An unhandled exception in MVC presentation may cause application crash
624270StackOverflowException if a predefined rule references itself
624063Links to open active email campaigns show CampaignCreation instead of CampaignReport
623581ContentSearch.DistinguishEntityAndDescendantAccessRules does not apply inheritance in the way the access viewer does
623119Indexes may contain outdated data when Web Database replication is used with 2 or more indexing roles
408701Caches can be populated with outdated values when replication is configured
622162Experience Editor Ribbon not rendered after deleting the content item
620009Checkbox unchecked unintentionally in Content Editor
625223A new cache instance may be created on each invocation of a ReusableValueComputedIndexField
619148A new cache instance may be created on each invocation of a ReusableValueComputedIndexField
619146High lock contention when removing cache entries based on a predicate
619144Fix breaking change introduced as a result of fix for 324449
621268Added the ability to optionally enable Connection Strings in Microsoft's Azure Monitor - Application Insights feature, in response to Microsoft declaring end of support for Instrumentation Key Ingestion as of March 31, 2025; ref: KB1003554
618292Search results show items that the user is not allowed to read when the fix for 493002 is applied
617089"Sending" state is not moved to "paused" if CM instance is restarted during dispatch
616534Sitecore.Configuration.ClientDataStore+DataUpdatedRemoteEvent causes immediate reload of information from the ClientData table instead of just clearing the cached information
617493Running processors concurrently causes lock contention
371625Running processors with reusable="false" attribute concurrently causes lock contention
598738Added optional automation to simplify installing SXP 10.2.3 PRE builds; includes automated application of binding redirects and patching of config files where applicable; see Documentation/Optional deploy automation/readme.md in the SXP 10.2.3 PRE build package.
470890Call .ToString() explicitly when forming ItemCache key to avoid array allocations
444845Context.Site may be null in computed index fields (if indexing in parallel)
362804In the Experience Editor, pressing enter in the search box of a Multilist with Search field clears the recently selected entries
310741User Manager's search by email '@' does not work for non admin user
290139The 'XFrameOptionsHeaderModule' throws exception in case Illegal characters in path

 

Released after 10.2 Update-1 (10.2.1 rev. 009559), up to and including 10.2 Update-2 (10.2.2 rev. 010645)

Ref. IDDescription
615391, 609758, 606641, 594651, 363636Security enhancements
614401Scheduled enrollment does not respect the maximum enrollment setting
613815Workitem processing does not check the plan state, e.g. Active or Inactive
609009Accessing a Sitecore URL such as https://(CD domain)/(item ID format) results in an Object reference not set to an instance of an object error
491656Opening an item from the Content Editor Navigate tab results in an Object reference not set to an instance of an object error
608291The EmailOpenedEvent is saved against source contact after merging a known contact (source contact) into a known contact (target contact)
607142A Speak request is using wrong site context in preview mode
606531System.ArgumentException error may occur after retrieving a contact by multiple identifiers in a single batch
605729LiveModeEnabler does not support publishing in preview mode
605291Scheduled enrollment adds contacts to Marketing Automation plans even if a plan is inactive
604409The email campaign description does not support special characters
604026PDF content extraction of many .pdf files using PdfSharp may consume excessive CPU resources
603638Unable to access a closed stream error occurs while saving files from filestorage table to disk
603194A Mutex corruption blocks all requests to open Experience Editor
599633A DataEngine deadlock can occur between two threads that are making changes to unrelated items
598149Creating a validation rule with parameter Result=FatalError does not allow standard values to be saved
597461The LeaderBoard is empty when selecting it from the Reports
597335Breadcrumbs do not resolve the correct site when clicking the Go button without selecting any item
595667the ResizeProcessor may be inefficient when invoked for non-image media
595670Media files are stored on the file system during indexing
591674The .pdf file should be opened in ReadOnly mode when its content is read for indexing
324449Extraction of shared media content is performed for each language during indexing
594111Unable to login virtual user in the httpRequestBegin pipeline after installing previous SXP 10.2 hotfix #554564
593323Recursive related items and related items in a content dependency returns all items in all languages
593054Recursive related items in a content dependency is not working as expected
593160The GetRenderingContentDependenciesPipeline crashes when there are broken links
592310A multipage form validates fields even though the page has been skipped
592307The internal link to a versioned media item added in the Rich Text Editor contains the wrong language
592301The internal link to a versioned media item added in the Rich Text Editor contains the wrong language using a Sitecore link via Search when languageEmbedding is set to always
591897A cumulative hotfix applied on Sitecore XP 10.2 creates deadlocks in an XP1 topology
589574Long personalization rules in the segmented list leads to a serialization exception
589519Wrong method name OnDoubleClick in Sitecore.Reflection.Filtering.config
516003No rule fact resolver can be found for ISegmentationServiceContext when using a filter with goal taxonomy facet rule
498395Previewing unpublishable items is not possible even when setting previewUnpublishableItems to true
490149BlobProviderException occurs when publishing a site item if the media was detached from the item
486907GetDataSourceItemByQuery aborts the pipeline even if it could not process the data source
412499Simultaneous launch of Experience Editor in two browsers after restarting the Sitecore instance causes one of them to crash

 

Released after 10.2 Initial (10.2.0 rev. 006766), up to and including 10.2 Update-1 (10.2.1 rev. 009559)

Ref. IDDescription
586965, 586117, 584731, 582720, 576798, 576660, 568150, 500712, 390299Security enhancements
497506When xConnect is not running, working in the Content Editor displays an error message, whereas Content Editor operations should be unimpacted
558081Media upload with Overwrite existing media items and Make uploaded media items versionable does not clear Shared fields
534067You can now manage roles behavior for external users using the clearroleswhensignin setting
507001The values of single-line text and the multi-line text fields are not displayed in the Experience Editor; see KB1002418
565729The preview date and time dialog in the Experience Editor ignores the date/time format preference
522604HTML tags are removed from a single-line text field when editing and saving other fields
568200In the Experience Editor, inputs in the Rich Text Editor's HTML tab will not be saved if they include nested tags
573497Duplicate renderings in the Add Rendering dialog in Experience Editor; if your deployment includes Sitecore Experience Accelerator (SXA) or Experience Commerce (XC), then this update requires installing SXA hotfix version SC Hotfix 581375-1 SXA 10.2.0.4247 or higher; see KB1001757
485274If language fallback is enabled, a You cannot edit the 'the form' item because it is protected..." error occurs and you are unable to save a language version of a form
490008Field validation upon saving a form can be bypassed by changing related data inputs
502894Language-specifc and special characters get stripped from form labels
566609After adding a Redirect to a page submit action to a form, the selected item is not displayed in the Content Tree and the Content Tree remains collapsed
565562You can now change the default package installation behavior so that the item in the target database preserves the version numbers from the source database
450353If the ItemCloning.DeleteClonesWithOriginalItem setting is set to true, the PublishManager.DataEngine_DeletedItem method throws a NullReferenceException
523123When deleting an item that has clones and more than one language, the PublishManager.DataEngine_DeletedItem method throws a NullReferenceException
526576, 526577Publishing.CheckSecurity does not allow authenticated external users to publish a change to a content item
554564If a virtual user publishes items several times, the ribbon in the Content Editor becomes collapsed
578684When a shared Renderings delta is present in the language without a rendering ID, an ArgumentNullException is thrown on Edge publishing
229436The RequireLogin attribute breaks the logic of authentication to the configured login page of the front end site
510418When you log into the Sitecore external site via the external identity provider, a Sitecore title appears on the browser tab
381683If you create a virtual user with a name that contains only numeric characters, an exception is thrown
531248The Custom Properties of a virtual user are lost during RuntimeSetting serialization
555286If a virtual user logs in via AzureAD, an endless redirect loop in Horizon may occur
477223Searching using the Search tab does not resolve access permissions correctly
493002A permission-enabled search does not function correctly in a nested roles scenario
515248In Content Tree search, the value of the Search.ContentTreeSearch.MaxResults setting is ignored
529807Search operations, like deleting search results, do not track the user who performed the operation, running instead under an anonymous user
559137Multi-term fuzzy search does not return any results. This can be a breaking change for deployments moving from Azure Search to Solr
561884, 561871, 97020The switch of Solr delete strategy from Delete-By-Query to Delete-By-Id may require updating Solr configuration
580395Search indexes may include excluded items as a result of adding new item versions
581503When you rename an item using the Sitecore CLI, LayoutData does not publish and the old LayoutData is still available
412448xDB stored procedures can lead to an infinite loop inside the SQL Server, causing high DTU usage
589304SC_ANALYTICS_GLOBAL_COOKIE continues to remain active even after a customer has revoked the permission to collect cookies
526015Tracking fails to adhere to visitor's consent preferences, with the SC_ANALYTICS_GLOBAL_COOKIE cookie being set despite setting explicitConsentForTrackingIsRequired
558847Long personalization rules break the Experience Editor
301732Errors occur when selecting a goal on the conversion rate from a page test on a non-English language
575840In Mozilla Firefox, the item does not move to the next workflow state via Approve with test
552034The goal taxonomy facet rule in a Marketing Automation plan does not work when the number of goal items exceeds 20
569634When EXM is enabled in two Content Management (CM) instances, the email campaign job status is not retrievable in the second CM instance
587814Upon selecting the Edit the related item context menu button, the embedded Content Editor does not display as expected
329704When you insert snippets, the <blockquote> and <p> tags do not display correctly
447307After a warm disaster recovery process is triggered, Sitecore tries to connect to the original SolrCloud server; see KB1000745
483476The hidden File Upload field is validated and cannot be disabled because the field uses a different hidden field ID
489654When you enter an anchor tag <a href="#">Text</a>, the rendered HTML becomes <a href="##">Text</a> on the front end
499061If you access LayoutCache.GetCacheKeys(), the entire concurrent dictionary gets locked
509668After publishing a new language and enabling its fallback language, the requested page does not display and a This site cannot be reached error occurs
510291If you do not execute the GetCustomProperty and SetCustomProperty methods in the same request, the custom properties of a virtual user are not fetched from the database
526584In the Control Panel, after running the Rebuild link databases operation, the tables are populated with many duplicates
530961Retrieving the child items of resource items is not thread-safe; see KB1001823
535277Redis session state is not always locked while processing a request
537827When a target site is resolved, it uses the site rootPath and language but ignores the database
549048In the HTML editor, when you use alt codes inside the href attribute, the output includes an additional, unnecessary symbol
569444StartItem is ignored when resolving a site
575400, 578068The Search API may return incorrect results under load such as an SXA Checklist disappearing in an XM topology
582497A deadlock can occur on application start if aggregation runs for the first time and DeviceResolver runs simultaneously
584490Page crashes after inserting an image in the Rich Text Editor in a Chrome or Edge browser; see KB1003010
561871Removing multiple content items creates a separate request to Solr for each removed document; this can lead to performance-related errors such as exceeding the number of queued requests
559550When you deploy the mssql-init container that connects to Azure SQL, you may receive a message that the compatibility level may result in undefined behaviour
524238When you add items using package installation, some items switch to an empty version and appear to have lost their content
570314Deploying Sitecore XP using SIF fails due to retired Microsoft Web Platform Installer; see KB1003017
582977An ERROR_SMO_NEEDED_FOR_SQL_PROVIDER error occurs when installing Sitecore Experience Platform; see KB1003024
580538The installation of Sitecore XP fails on a machine with SQL Server PowerShell Module version 22.0.xx or later; see KB1003015