From foo@bar  Tue Nov 10 15:20:04 2026
Format: 1.8
Date: Tue, 10 Nov 2026 13:30:52 +0100
Source: sogo
Binary: sogo sogo-activesync sogo-activesync-dbgsym sogo-dbgsym
Architecture: hurd-amd64
Version: 5.12.13-1
Distribution: sid
Urgency: medium
Maintainer: Debian GNU/Hurd Build Daemon <buildd_hurd-amd64-boralus@buildd.debian.org>
Changed-By: Jordi Mallach <jordi@debian.org>
Description:
 sogo       - Scalable groupware server
 sogo-activesync - Scalable groupware server - ActiveSync module
Changes:
 sogo (5.12.13-1) unstable; urgency=medium
 .
   * New upstream release with security bugfixes:
     - SQL injection via login/UID in SQL user sources.
     - SQL injection via unvalidated session cookie.
     - Buffer overflow parsing BYDAY in recurrence rules.
     - LDAP filter injection in logins and address book searches.
     - Path traversal via mail draft names.
     - HTML mail sanitizer bypasses allowing remote content loading.
   * Drop workaround for gnustep regex handling, fixed in GNUStep.
   * Fix cherry-picked upstream patches, now included in 5.12.13.
Checksums-Sha1:
 21a4bb71e20db0a8700ea7f5d162159c0be58d91 105084 sogo-activesync-dbgsym_5.12.13-1_hurd-amd64.deb
 139f0d5c73a66aafdab6378358119476dbdc254f 259996 sogo-activesync_5.12.13-1_hurd-amd64.deb
 c835ac5f434da05f00d415f1f2fd4db8748650c1 1256600 sogo-dbgsym_5.12.13-1_hurd-amd64.deb
 bee77c85d847b8c4185b092bb95ab4c2023b29ff 13328 sogo_5.12.13-1_hurd-amd64.buildinfo
 4031ef3fa026ac29ce34c1e1a8dc36772834a7c4 1484736 sogo_5.12.13-1_hurd-amd64.deb
Checksums-Sha256:
 fcef966a465fb0c3928822cced22c94449fad4ef2af3acc9d87c1147f7e980cc 105084 sogo-activesync-dbgsym_5.12.13-1_hurd-amd64.deb
 fc01d130ac31300fd5a7856e844036aef34f9e3e1a5c377cae0908d9f94fd007 259996 sogo-activesync_5.12.13-1_hurd-amd64.deb
 935ce4441dc35d082d47836dfd496db25a31d112f5f0949de0335b097524d562 1256600 sogo-dbgsym_5.12.13-1_hurd-amd64.deb
 58ad84d3a3e19de8fe576f1980ba04046e36d13f351b7a7ba7a72a3ee0c2c7a8 13328 sogo_5.12.13-1_hurd-amd64.buildinfo
 9621e5523193d77790472b52d1644a6ebaaadf8ccf79bfd6794211416122c609 1484736 sogo_5.12.13-1_hurd-amd64.deb
Files:
 f52dae199d4b67a7796ee530df4c9cc5 105084 debug optional sogo-activesync-dbgsym_5.12.13-1_hurd-amd64.deb
 11f74723186cbce4f361bc8806a4e087 259996 mail optional sogo-activesync_5.12.13-1_hurd-amd64.deb
 9be192462d1e60fc073bee30581f97d4 1256600 debug optional sogo-dbgsym_5.12.13-1_hurd-amd64.deb
 9c75d7bff97679bc2b9b976421626b8f 13328 mail optional sogo_5.12.13-1_hurd-amd64.buildinfo
 cd24e5867e44a15054da91f017549942 1484736 mail optional sogo_5.12.13-1_hurd-amd64.deb
Signed-By: buildd autosigning key boralus <buildd_hurd-amd64-boralus@buildd.debian.org>

