Format: 1.8
Date: Sat, 29 Aug 2026 15:14:10 +0200
Source: sogo
Binary: sogo sogo-activesync sogo-activesync-common sogo-activesync-dbgsym sogo-common sogo-dbg sogo-dbgsym sogo-dev
Architecture: source all amd64
Version: 5.12.10-1bit1
Distribution: unstable
Urgency: medium
Maintainer: Daniel Betschart <daniel.betschart@betschart-it.ch>
Changed-By: Daniel Betschart <daniel.betschart@betschart-it.ch>
Description:
 sogo       - Scalable groupware server
 sogo-activesync - Scalable groupware server - ActiveSync module
 sogo-activesync-common - Scalable groupware server - ActiveSync module common files
 sogo-common - Scalable groupware server - common files
 sogo-dbg   - Scalable groupware server - debugging symbols
 sogo-dev   - a modern and scalable groupware - development files
Changes:
 sogo (5.12.10-1bit1) unstable; urgency=medium
 .
   * New upstream release.
     - possible SQL injection with specific request
     - several possible XSS injections with malicious mail
     - possible SSRF with specific request
     - possible shell injection when using sendmail
   * Add patch to use the correct regex template in html injection fix.
Checksums-Sha1:
 f8c63b5d20ac9a8f9c592bfab76a24be90b40c14 1518 sogo_5.12.10-1bit1.dsc
 279996242ad9b69d9f41c2d9d1c3caddf4232331 37856647 sogo_5.12.10.orig.tar.gz
 8176e8a444ec2cafe0bc72d8becad207663127e7 22996 sogo_5.12.10-1bit1.debian.tar.xz
 e525bf8ce9fff57c1b473965c9e4afaaad4a8155 130920 sogo-activesync-common_5.12.10-1bit1_all.deb
 dbec838443e925a5228de81b12e87e682f2e4523 104780 sogo-activesync-dbgsym_5.12.10-1bit1_amd64.deb
 bd23110d6887e3dad40f4e93a3ca83bde07f051c 261924 sogo-activesync_5.12.10-1bit1_amd64.deb
 cd61180370646e5068ba9edd582898e4ba619761 19264864 sogo-common_5.12.10-1bit1_all.deb
 d34bf65b22a2de6fde70b6c514b3483e39953e79 130112 sogo-dbg_5.12.10-1bit1_amd64.deb
 ceff27a00378ec8819d02fa83d108f79db104a9b 1227436 sogo-dbgsym_5.12.10-1bit1_amd64.deb
 b8fc87e83dbe77fae8630b89e2ae81961b115ba4 170356 sogo-dev_5.12.10-1bit1_amd64.deb
 16fc4f700ca42882999ff89dc107de27ec0256a4 14539 sogo_5.12.10-1bit1_amd64.buildinfo
 896593e6e08118caa0c6340d2d803c82facbf13c 1445748 sogo_5.12.10-1bit1_amd64.deb
Checksums-Sha256:
 8282319a79f227a11c1bc999a0b82497d9ac951ba0190188de7c962a5dd7eadc 1518 sogo_5.12.10-1bit1.dsc
 fde6b6cfed9c11afae6c327711ae25290e67df779487235cf8c094c7e0bd762c 37856647 sogo_5.12.10.orig.tar.gz
 31674bb26584af22c3a6500b9bb6c94b11a6f639129b4f11bdfe78cb6c03abfa 22996 sogo_5.12.10-1bit1.debian.tar.xz
 3f25ce6271627b1d3b7a3beb290971fc164f2d96741da3e1a4db639f70e7ed8b 130920 sogo-activesync-common_5.12.10-1bit1_all.deb
 373ee2d7acdb07df97b66bcdb5ecbfda7b0af7d460f45f542ada5d8d02446ad6 104780 sogo-activesync-dbgsym_5.12.10-1bit1_amd64.deb
 d869ae160d4daa2c26fd1834e4b6c7b3735ad4ee2ccaa6a471b5ba9059fa57a9 261924 sogo-activesync_5.12.10-1bit1_amd64.deb
 57bd9907b60a09ea96e05f33a9fee6f88257a0a0ce55a04438e2201665933d4c 19264864 sogo-common_5.12.10-1bit1_all.deb
 0c1e49e4d4876988cebc4fa03b4a73bf74cb9dd04a691a832a05b094de398a6e 130112 sogo-dbg_5.12.10-1bit1_amd64.deb
 12f03f9b35caf0e62d11c3659482d2ac80829c2489c4ef4876ac22f3bc123755 1227436 sogo-dbgsym_5.12.10-1bit1_amd64.deb
 32607f60ea789d9c35e7e05e20d55318d9aa8991b5e72d771cc1c653f8b18050 170356 sogo-dev_5.12.10-1bit1_amd64.deb
 6c0ec0aad9cf6b45a94b2226cd8b45715ffb6df1af6f7272fb7d693ba2027a79 14539 sogo_5.12.10-1bit1_amd64.buildinfo
 3b95afc744836f5a003bef409fe4cf3733eec12854c00d9ea442f8f7dd864ee8 1445748 sogo_5.12.10-1bit1_amd64.deb
Files:
 b3074edf5f6af506e9f44400cc6e4c1c 1518 mail optional sogo_5.12.10-1bit1.dsc
 2d4e10274adb42a37d21499b6ad7c04f 37856647 mail optional sogo_5.12.10.orig.tar.gz
 d84a8fafe93d5f8bf1a395af5833029f 22996 mail optional sogo_5.12.10-1bit1.debian.tar.xz
 04d444e1e3e40e12fc51e58ab13487c4 130920 web extra sogo-activesync-common_5.12.10-1bit1_all.deb
 11c7c4082987fb5114fa6b74c91cf033 104780 debug optional sogo-activesync-dbgsym_5.12.10-1bit1_amd64.deb
 50e216c6bfbcbbadee5d81f4f26e4de3 261924 web extra sogo-activesync_5.12.10-1bit1_amd64.deb
 4d50ba9af2df26eb3c369e9457af5ade 19264864 mail optional sogo-common_5.12.10-1bit1_all.deb
 dea9397d2c25a34ad1b2c0ace0c44e39 130112 debug extra sogo-dbg_5.12.10-1bit1_amd64.deb
 125959a7591fe03d46e92b142d13e014 1227436 debug optional sogo-dbgsym_5.12.10-1bit1_amd64.deb
 7407d45ba21bf612bcc5b609fd7cfee9 170356 devel optional sogo-dev_5.12.10-1bit1_amd64.deb
 da8d3c156a21e0205b80bc7a361aaf72 14539 mail optional sogo_5.12.10-1bit1_amd64.buildinfo
 c1d2f5626bd1ff9f29a9c4a3e7cdfcd9 1445748 mail optional sogo_5.12.10-1bit1_amd64.deb