Microsoft last week released new Dynamic updates for Windows 11 version 24H2 as well as Server 2025. This followed the updates released for Windows 11 22H2 and 23H2 (under KB5058502) and Windows 11 24H2 (under KB5058499). The new update, just like the previous one, actually mentions a release note for the Recovery update.
Dynamic updates bring improvements to the Windows Recovery in the form of Windows Recovery Environment (WinRE) updates, also called Safe OS updates, as well as to the Setup binaries in the form of Setup updates.
These Dynamic Update packages are meant to be applied to existing Windows images prior to their deployment. These packages include fixes to Setup.exe binaries, SafeOS updates for Windows Recovery Environment, and more. Dynamic Updates also help preserve Language Pack (LP) and Features on Demand (FODs) content during the upgrade process. VBScript, for example, is currently an FOD on Windows 11 24H2.
First up, we have the Setup update which still continues with the generic changelog. It says:
"KB5060614: Setup Dynamic Update for Windows 11, version 24H2 and Windows Server 2025: May 28, 2025
Summary
This update makes improvements to Windows setup binaries or any files that setup uses for feature updates in Windows 11, version 24H2 and Windows Server 2025."
Up next, we have the WinRE update. It notes system stability improvements for Kerberos with bug fixes related to LSASS ( Local Security Authority Subsystem Service). This reminds of the recent KB5061768 out-of-band update for Windows 10 BitLocker bootloops that was also related to LSASS.
For those wondering, the LSASS helps authenticate users for local and remote sign-ins and enforce local security policies to prevent code injection that could lead to the compromise of credentials. It is part of the Local Security Authority (LSA) process:
"KB5059693: Safe OS Dynamic Update for Windows 11, version 24H2 and Server 2025: May 28, 2025
Summary
This update makes improvements to the Windows recovery environment in Windows 11, version 24H2 and Windows Server 2025. This update addresses the following issue:
- [Kerberos] Fixed: An issue affecting the Local Security Authority Subsystem Service (LSASS) during Windows Recovery Environment operations. LSASS may crash when an application calls a specific function. This leads to system instability."
Microsoft notes that the WinRE update will be downloaded and installed automatically via the Windows Update channel. However, the Setup update requires manual downloading. You can find them both here: KB5060614 / KB5059693.
0 Comments - Add comment