If you’re using Symantec Endpoint Protection or any Norton Antivirus product on a Windows 7 or Server 2008 R2 machine, you didn’t get the August patches.
Shortly after the August Monthly Rollup and Security-only patches were released, Microsoft put a freeze on systems running Symantec or Norton antivirus products.
Somehow, Symantec didn’t get the message back in November that the shift was underway, and missed the deadline.
All currently available versions of Symantec Endpoint Protection are affected.
… Out of an abundance of caution, Symantec and Microsoft worked together to only allow the update to be visible to versions of Symantec Endpoint Protection that fully support SHA-2 signed Windows executables replaced by this and future updates to Windows 7 SP1 and Windows 2008 R2 SP1.
Yesterday, in a coordinated reveal, both Symantec and Microsoft say that all is now well.