Reprinted from TidBITS by permission; reuse governed by Creative Commons
license BY-NC-ND 3.0. TidBITS has offered years of thoughtful commentary
on Apple and Internet topics. For free email subscriptions and access to the
entire TidBITS archive, visit http://www.tidbits.com/


   Microsoft Office 2016 15.38

   Agen G. N. Schmitz

   Microsoft has issued version 15.38 of its [1]Office 2016 application
   suite, which is focused on patching some important security issues. The
   update resolves two memory corruption vulnerabilities in Excel
   ([2]CVE-2017-8631 and [3]CVE-2017-8632) that could allow an attacker to
   use a specially crafted file to access permissions. The same
   vulnerabilities are also patched in version 14.7.7 of [4]Office 2011
   (see '[5]The End of Microsoft Office for Mac 2011 Is Nigh,' 23 August
   2017). The Office 2016 release also updates the Microsoft AutoUpdate
   (MAU) application to version 3.9.3, providing an alert to reinstall MAU
   if missing or broken components are detected. ($149.99 for one-time
   purchase, free update through Microsoft AutoUpdate, [6]release notes,
   10.10+)

References

   1. https://products.office.com/en-us/mac/microsoft-office-for-mac
   2. https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8631
   3. https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8632
   4. https://support.microsoft.com/en-us/help/3212225/description-of-the-security-update-for-office-for-mac-2011-14-7-7
   5. http://tidbits.com/article/17414
   6. https://support.office.com/en-us/article/Release-notes-for-Office-2016-for-Mac-ed2da564-6d53-4542-9954-7e3209681a41

.