Univention Corporate Server 3.3 erratum 27 (security)

This update addresses the following issue(s):
* PIL/IcnsImagePlugin.py allows remote attackers to cause a denial
  of service via a crafted block size (CVE-2014-3589)
* Execution of arbitrary code due to buffer overflow in FliDecode.c
  (CVE-2016-0775)
* Remote denial of service (crash) via a crafted PhotoCD file due
  to buffer overflow in the ImagingPcdDecode function in PcdDecode.c
  (CVE-2016-2533)
* Pillow before 3.3.2 allows context-dependent attackers to obtain
  sensitive information by using the "crafted image file" approach,
  related to an "Integer Overflow" issue affecting the
  Image.core.map_buffer in map.c component. (CVE-2016-9189)
* Pillow before 3.3.2 allows context-dependent attackers to execute
  arbitrary code by using the "crafted image file" approach, related
  to an "Insecure Sign Extension" issue affecting the ImagingNew in
  Storage.c component. (CVE-2016-9190)