From foo@bar  Tue Nov 10 15:20:04 2026
Format: 1.8
Date: Tue, 10 Nov 2026 13:30:52 +0100
Source: sogo
Binary: sogo sogo-activesync sogo-activesync-dbgsym sogo-dbgsym
Architecture: hppa
Version: 5.12.13-1
Distribution: sid
Urgency: medium
Maintainer: hppa Build Daemon (c8000) <buildd2@c8000.parisc-linux.org>
Changed-By: Jordi Mallach <jordi@debian.org>
Description:
 sogo       - Scalable groupware server
 sogo-activesync - Scalable groupware server - ActiveSync module
Changes:
 sogo (5.12.13-1) unstable; urgency=medium
 .
   * New upstream release with security bugfixes:
     - SQL injection via login/UID in SQL user sources.
     - SQL injection via unvalidated session cookie.
     - Buffer overflow parsing BYDAY in recurrence rules.
     - LDAP filter injection in logins and address book searches.
     - Path traversal via mail draft names.
     - HTML mail sanitizer bypasses allowing remote content loading.
   * Drop workaround for gnustep regex handling, fixed in GNUStep.
   * Fix cherry-picked upstream patches, now included in 5.12.13.
Checksums-Sha1:
 37fa536f3a0c2aca56341cfa6e233640bdf03785 102732 sogo-activesync-dbgsym_5.12.13-1_hppa.deb
 3715adc80664c6fe234611c6233d9decee2a382e 244036 sogo-activesync_5.12.13-1_hppa.deb
 55a94f7dafb560b646f734949983ca76c6ff1643 1216416 sogo-dbgsym_5.12.13-1_hppa.deb
 e725d6aa98ad245124ce1e5008c9a074f6c9fb26 12777 sogo_5.12.13-1_hppa.buildinfo
 d5d39f15e302506555de4d55486b3c19fec0a2b6 1391104 sogo_5.12.13-1_hppa.deb
Checksums-Sha256:
 db43934a3383fb555b07f18d719de55a584dfa1e7cf95f8eff0c3b61168bc8e4 102732 sogo-activesync-dbgsym_5.12.13-1_hppa.deb
 3405f8867340e8f2e909506e4fa83938cb6214a7545c3fe0d445dcc1de0e62c4 244036 sogo-activesync_5.12.13-1_hppa.deb
 9280d25ba82e332ec6a115f02ac91c79a11d7d5d7af7813aac8db1e3a0a3bbd5 1216416 sogo-dbgsym_5.12.13-1_hppa.deb
 939f49558b5b898b16a5f13ba2d4305ef583d7d3df1bea914341d08c32137b6e 12777 sogo_5.12.13-1_hppa.buildinfo
 d38949e692d2864b611551f1a5cbb911a7167e67c16ea0ed19ed90e36735335d 1391104 sogo_5.12.13-1_hppa.deb
Files:
 e428a8dc100a3b6e25cb354810efb15e 102732 debug optional sogo-activesync-dbgsym_5.12.13-1_hppa.deb
 400ee292435f60e97c9038dde3248394 244036 mail optional sogo-activesync_5.12.13-1_hppa.deb
 9d7800d00526c0128f735a4d0fb78a71 1216416 debug optional sogo-dbgsym_5.12.13-1_hppa.deb
 e078c9ca7d71be32fc551c58e33603de 12777 mail optional sogo_5.12.13-1_hppa.buildinfo
 cc789bdf247ea64e845666c7ef382746 1391104 mail optional sogo_5.12.13-1_hppa.deb
Signed-By: Debian buildd autosigning key for c8000 <buildd_hppa-c8000@buildd.debian.org>