From foo@bar  Tue Nov 10 15:30:04 2026
Format: 1.8
Date: Tue, 10 Nov 2026 13:30:52 +0100
Source: sogo
Binary: sogo sogo-activesync sogo-activesync-dbgsym sogo-dbgsym
Architecture: alpha
Version: 5.12.13-1
Distribution: sid
Urgency: medium
Maintainer: alpha Build Daemon (alpha-sc-01) <alpha-sc-01@alpha-sc-01.buildd.org>
Changed-By: Jordi Mallach <jordi@debian.org>
Description:
 sogo       - Scalable groupware server
 sogo-activesync - Scalable groupware server - ActiveSync module
Changes:
 sogo (5.12.13-1) unstable; urgency=medium
 .
   * New upstream release with security bugfixes:
     - SQL injection via login/UID in SQL user sources.
     - SQL injection via unvalidated session cookie.
     - Buffer overflow parsing BYDAY in recurrence rules.
     - LDAP filter injection in logins and address book searches.
     - Path traversal via mail draft names.
     - HTML mail sanitizer bypasses allowing remote content loading.
   * Drop workaround for gnustep regex handling, fixed in GNUStep.
   * Fix cherry-picked upstream patches, now included in 5.12.13.
Checksums-Sha1:
 946b2aa551481b81d0560c1e9c0438ff7915d5d7 101500 sogo-activesync-dbgsym_5.12.13-1_alpha.deb
 81110b6e30d5790d98cd1cb6888a0775e33507a7 242880 sogo-activesync_5.12.13-1_alpha.deb
 fa4d5f20844675adc5849d7ec602e11228cbb7cd 1230276 sogo-dbgsym_5.12.13-1_alpha.deb
 4733da8904b40ccf8f292dcf88e171853618516c 12782 sogo_5.12.13-1_alpha.buildinfo
 2334ac618336555c0be87a47298c11dc431ff280 1403344 sogo_5.12.13-1_alpha.deb
Checksums-Sha256:
 8f7b36c634403afed0572bae5d5281f437296af272dfa78a6292d94434463703 101500 sogo-activesync-dbgsym_5.12.13-1_alpha.deb
 ff4b7e48b67ebb6b14c3dad176154ca0d5d7e824d9e035b4ac5dfb12c70f91f8 242880 sogo-activesync_5.12.13-1_alpha.deb
 010f43cb83301d04529b219a3b0ee8757b7949740f747a8684c32e5c5060c12a 1230276 sogo-dbgsym_5.12.13-1_alpha.deb
 93e0bf1dc99cf344667d18cee1e53e2578ab41c53f29434e604387b8d137becb 12782 sogo_5.12.13-1_alpha.buildinfo
 56f667667117238a85955498e2b99fa4b0762013c95af12f7f6317db8b507ec3 1403344 sogo_5.12.13-1_alpha.deb
Files:
 f3a478020ed19cf0531a427aaca716c5 101500 debug optional sogo-activesync-dbgsym_5.12.13-1_alpha.deb
 e856fbcb8c2dce156f938fc6a730a561 242880 mail optional sogo-activesync_5.12.13-1_alpha.deb
 42f6ef3534cdb687d1cede9eb0b92bb5 1230276 debug optional sogo-dbgsym_5.12.13-1_alpha.deb
 63eb6383c81ea6e18cb3a6d51d2a3fea 12782 mail optional sogo_5.12.13-1_alpha.buildinfo
 a83e4bbb7a62527b99d980786d5b433e 1403344 mail optional sogo_5.12.13-1_alpha.deb
Signed-By: Debian buildd autosigning key for alpha-sc-01 <buildd_alpha-alpha-sc-01@buildd.debian.org>