Univention Corporate Server 3.2 erratum 278 (security)

Multiple security vulnerabilities have been found in eglibc:
* Directory traversal in locale-related environment variables
  (CVE-2014-0475)
* Off-by-one in locale handling (CVE-2014-5119)
* Crashes in decoding invalid code pages (IBM930, IBM933, IBM935,
  IBM937, IBM939, IBM1364) (CVE-2012-6656, CVE-2014-6040)
* Command execution in wordexp() with WRDE_NOCMD specified
  (CVE-2014-7817)
* Denial of service through infinite loop in getnetbyname()
  (CVE-2014-9402)
* Buffer overflow in gethostbyname and gethostbyname2 functions
  (CVE-2015-0235)