Earlier this past week Microsoft released non-security optional updates for all supported Windows 11 versions under KB5067112 and KB5067036. Alongside those the company also released new accompanying dynamic updates (A new OOBE update under KB5070349 has also been released).
For those who may not know, dynamic updates bring improvements to the Windows Recovery in the form of Windows Recovery Environment (WinRE) updates, also called Safe OS updates, as well as to the Setup binaries in the form of Setup updates.
These Dynamic Update packages are meant to be applied to existing Windows images prior to their deployment. These packages include fixes to Setup.exe binaries, SafeOS updates for Windows Recovery Environment, and more. Dynamic Updates also help preserve Language Pack (LP) and Features on Demand (FODs) content during the upgrade process. VBScript, for example, is currently an FOD on Windows 11 24H2.
Both setup and recovery updates were released but only for versions 25H2 and 24H2 as previous versions did not receive them. The updates also apply to Windows Server 2025. The changelogs are given below. First up we have the Setup update:
"KB5068516: Setup Dynamic Update for Windows 11, version 24H2 and 25H2, and Windows Server 2025: October 28, 2025
This update makes improvements to Windows setup binaries or any files that setup uses for feature updates in Windows 11, version 24H2, Windows 11, version 25H2, and Windows Server 2025."
Up next, we have the Safe OS recovery update. It writes:
"KB5067040: Safe OS Dynamic Update for Windows 11, version 24H2 and 25H2, and Windows Server 2025: October 28, 2025
This update makes improvements to the Windows recovery environment (WinRE) in Windows 11, version 24H2, Windows 11, version 25H2 and Windows Server 2025."
Microsoft notes that both the Setup and Recovery updates will be downloaded and installed automatically via the Windows Update channel. You can also avail both of them on Microsoft"s Update Catalog website: KB5068516, KB5067040.