Setup & Recovery update (KB5060614 & KB5059693) improve Windows 11 stability

Microsoft has quietly rolled out new Dynamic updates for Windows 11 version 24H2 and Windows Server 2025. The updates don’t bring any shiny new features, but focus on system setup and recovery. 

What’s in the update?

First, we’ve got a Setup Dynamic Update (KB5060614). This one focuses on improving how Windows handles installations and feature updates. It tweaks the binaries used by setup, which helps smooth things out if you’re upgrading from an older build or deploying Windows on a new device.

Then there’s the Safe OS Dynamic Update (KB5059693), which targets the Windows Recovery Environment (WinRE)—specifically, an issue involving LSASS (Local Security Authority Subsystem Service). 

For the uninitiated, LSASS plays a key role in handling sign-ins and local security policies. Microsoft patched a bug where LSASS could crash during recovery operations when certain functions were triggered.

The WinRE update, aka Safe OS update, will install automatically through Windows Update, so most users won’t have to manually update. The Setup update, however, is a manual download (KB5060614 and KB5059693) for IT admins or anyone managing Windows images.

Also read: Windows 11 24H2 now stable for gaming with KB5058499

These updates are typically applied before deployment and help preserve things like language packs and Features on Demand—VBScript, for example, is now one of those optional features in 24H2.