Univention Corporate Server 4.2 erratum 292 (security)

This update addresses the following issue:
* The ole_init function in ole.c in catdoc allows remote attackers to
  cause a denial of service (heap-based buffer underflow and application
  crash) or possibly have unspecified other impact via a crafted file, i.e.,
  data is written to memory addresses before the beginning of the tmpBuf
  buffer. (CVE-2017-11110)