A new update is available for Univention Corporate Server 3.1 as part of the extended security maintenance. It addresses the following problem: Program component: procmail Reference: CVE-2015-0240 Fixed version: 3.22-19.13.201506191522 A heap-based buffer overflow in the formail tool of procmail allows the execution of arbitrary code when processing a malformed mail. -- Univention GmbH be open. Mary-Somerville-Str.1 28359 Bremen Tel. : +49 421 22232-0 Fax : +49 421 22232-99 http://www.univention.de/ Geschäftsführer: Peter H. Ganten HRB 20755 Amtsgericht Bremen Steuer-Nr.: 71-597-02876