Format: 1.8
Date: Sat, 29 Aug 2026 15:14:10 +0200
Source: sogo
Architecture: source
Version: 5.12.10-1bit1
Distribution: unstable
Urgency: medium
Maintainer: Daniel Betschart <daniel.betschart@betschart-it.ch>
Changed-By: Daniel Betschart <daniel.betschart@betschart-it.ch>
Changes:
 sogo (5.12.10-1bit1) unstable; urgency=medium
 .
   * New upstream release.
     - possible SQL injection with specific request
     - several possible XSS injections with malicious mail
     - possible SSRF with specific request
     - possible shell injection when using sendmail
   * Add patch to use the correct regex template in html injection fix.
Checksums-Sha1:
 f8c63b5d20ac9a8f9c592bfab76a24be90b40c14 1518 sogo_5.12.10-1bit1.dsc
 279996242ad9b69d9f41c2d9d1c3caddf4232331 37856647 sogo_5.12.10.orig.tar.gz
 8176e8a444ec2cafe0bc72d8becad207663127e7 22996 sogo_5.12.10-1bit1.debian.tar.xz
 16fc4f700ca42882999ff89dc107de27ec0256a4 14539 sogo_5.12.10-1bit1_amd64.buildinfo
Checksums-Sha256:
 8282319a79f227a11c1bc999a0b82497d9ac951ba0190188de7c962a5dd7eadc 1518 sogo_5.12.10-1bit1.dsc
 fde6b6cfed9c11afae6c327711ae25290e67df779487235cf8c094c7e0bd762c 37856647 sogo_5.12.10.orig.tar.gz
 31674bb26584af22c3a6500b9bb6c94b11a6f639129b4f11bdfe78cb6c03abfa 22996 sogo_5.12.10-1bit1.debian.tar.xz
 6c0ec0aad9cf6b45a94b2226cd8b45715ffb6df1af6f7272fb7d693ba2027a79 14539 sogo_5.12.10-1bit1_amd64.buildinfo
Files:
 b3074edf5f6af506e9f44400cc6e4c1c 1518 mail optional sogo_5.12.10-1bit1.dsc
 2d4e10274adb42a37d21499b6ad7c04f 37856647 mail optional sogo_5.12.10.orig.tar.gz
 d84a8fafe93d5f8bf1a395af5833029f 22996 mail optional sogo_5.12.10-1bit1.debian.tar.xz
 da8d3c156a21e0205b80bc7a361aaf72 14539 mail optional sogo_5.12.10-1bit1_amd64.buildinfo