Security Advisories Released or Updated on January 9 and January 10

* Microsoft Security Advisory ADV170021

– Title: Microsoft Office Defense in Depth Update
https://portal.msrc.microsoft.com/en-US/security-guidance
advisory/ADV170021
– Reason for Revision: ADV170021 has been revised to add support
for disabling the Dynamic Update Exchange protocol (DDE) in all
supported editions of Microsoft Excel.

– Originally posted: December 12, 2017
– Updated: January 9, 2018
– Version: 2.0

* Microsoft Security Advisory ADV180002

– Title: Guidance to mitigate speculative execution side-channel
vulnerabilities
https://portal.msrc.microsoft.com/en-US/security-guidance
advisory/ADV180002
– Reason for Revision: Revised the Affected Products table to
include updates for supported editions of Microsoft SQL Server
2008, Microsoft SQL Server 2008, and Microsoft SQL Server 2016
because these updates provide mitigations for ADV180002.

– Originally posted: January 3, 2018
– Updated: January 9, 2018
– Version: 4.0

* Microsoft Security Advisory ADV180002

– Title: Guidance to mitigate speculative execution side-channel
vulnerabilities
https://portal.msrc.microsoft.com/en-US/security-guidance/
advisory/ADV180002
– Reason for Revision: Added FAQs to provide more details about the
following: the vulnerabilities described in this advisory, what
systems are at risk from the vulnerabilities, how customers can
be protected against each specific vulnerability, information for
customers with AMD-based devices.

– Originally posted: January 3, 2018
– Updated: January 10, 2018
– Version: 4.1