I received an immediate response. :)
Yes, they are included. It was pointed out to me that the second sentence of
the blog post says so ("These releases include fixes to customer reported
issues, all previously reported security/quality issues and updated
functionality."). Which I think is pretty darned subtle.
The individual KB articles will be updated to include this information.
From: [email protected] [mailto:[email protected]] On
Behalf Of Michael B. Smith
Sent: Wednesday, September 20, 2017 10:18 AM
To: [email protected]
Subject: [Exchange] RE: September 2017 Quarterly #MSExchange Updates
That's a great question!
I'm going to say "yes". But I've asked for verification.
From: [email protected]<mailto:[email protected]>
[mailto:[email protected]] On Behalf Of Senter, John
Sent: Wednesday, September 20, 2017 7:56 AM
To: [email protected]<mailto:[email protected]>
Subject: [Exchange] RE: September 2017 Quarterly #MSExchange Updates
So I do not see anything in the release notes that it includes the security fix
KB4036108. Is that in this CU?
From: [email protected]<mailto:[email protected]>
[mailto:[email protected]] On Behalf Of Michael B. Smith
Sent: Tuesday, September 19, 2017 4:30 PM
Subject: [Exchange] September 2017 Quarterly #MSExchange Updates
New blog post: September 2017 Quarterly #MSExchange Updates
http://www.essential.exchange/2017/09/19/september-2017-quarterly-exchange-updates/
MSExchangeTeam post:
https://blogs.technet.microsoft.com/exchange/2017/09/19/released-september-2017-quarterly-exchange-updates/