From foo@bar Tue Nov 10 15:20:05 2026 Format: 1.8 Date: Tue, 10 Nov 2026 13:30:52 +0100 Source: sogo Binary: sogo sogo-activesync sogo-activesync-dbgsym sogo-dbgsym Architecture: hurd-i386 Version: 5.12.13-1 Distribution: sid Urgency: medium Maintainer: Debian GNU/Hurd Build Daemon Changed-By: Jordi Mallach Description: sogo - Scalable groupware server sogo-activesync - Scalable groupware server - ActiveSync module Changes: sogo (5.12.13-1) unstable; urgency=medium . * New upstream release with security bugfixes: - SQL injection via login/UID in SQL user sources. - SQL injection via unvalidated session cookie. - Buffer overflow parsing BYDAY in recurrence rules. - LDAP filter injection in logins and address book searches. - Path traversal via mail draft names. - HTML mail sanitizer bypasses allowing remote content loading. * Drop workaround for gnustep regex handling, fixed in GNUStep. * Fix cherry-picked upstream patches, now included in 5.12.13. Checksums-Sha1: 2e0ef8e7a8e0e010f26cc9ca82d1b9bb9688eff7 103580 sogo-activesync-dbgsym_5.12.13-1_hurd-i386.deb fbca413c863bf274d4629025e527aa0cc3f4e48b 225116 sogo-activesync_5.12.13-1_hurd-i386.deb 9368aad83ae313ef301b47d82ecdee17b84bff4d 1225088 sogo-dbgsym_5.12.13-1_hurd-i386.deb 79a9bff1dc5399e9f02f87d8327c961922925d3d 13319 sogo_5.12.13-1_hurd-i386.buildinfo c8a56c53469018b609ece8a233ddc14e0aee88ea 1199916 sogo_5.12.13-1_hurd-i386.deb Checksums-Sha256: 7753cade8998f5e382a3c3cbb2be31448a3868ceda22820699ae1080dba0db1c 103580 sogo-activesync-dbgsym_5.12.13-1_hurd-i386.deb 9aa91f4c7f9e2f0f1ea5a679560516c684a32300537cd08bfbf24456bb1d4d5f 225116 sogo-activesync_5.12.13-1_hurd-i386.deb 368bf7e3c18d0ee6e067056f9cddf6cc1cdd461745d42fe4f4b9f3d8fdf1147b 1225088 sogo-dbgsym_5.12.13-1_hurd-i386.deb 2ab6bc9db62f7571b1fe4b88bda84efaf761a55a8a5c034d17b981395bce3b22 13319 sogo_5.12.13-1_hurd-i386.buildinfo 74591a4e88802967b659cd77b25de0afbc2972c8693cfbea056f35b7ea685895 1199916 sogo_5.12.13-1_hurd-i386.deb Files: a60168ab2840a2228d16c7cbfe39e8d5 103580 debug optional sogo-activesync-dbgsym_5.12.13-1_hurd-i386.deb bafa8fd0a006f8b99b1bc78cc1ab7563 225116 mail optional sogo-activesync_5.12.13-1_hurd-i386.deb c750fba2517208e01c25bf1514b2779c 1225088 debug optional sogo-dbgsym_5.12.13-1_hurd-i386.deb 7922e4ba325bfba64b472a75c45bb951 13319 mail optional sogo_5.12.13-1_hurd-i386.buildinfo 18065f432d562f1965d11198f66c7751 1199916 mail optional sogo_5.12.13-1_hurd-i386.deb Signed-By: buildd autosigning key ironforge