From foo@bar  Tue Nov 10 15:50:12 2026
Format: 1.8
Date: Tue, 10 Nov 2026 13:30:52 +0100
Source: sogo
Binary: sogo sogo-activesync sogo-activesync-dbgsym sogo-dbgsym
Architecture: m68k
Version: 5.12.13-1
Distribution: sid
Urgency: medium
Maintainer: m68k Build Daemon (m68k-osuosl-01) <buildd@m68k-osuosl-01.buildd.org>
Changed-By: Jordi Mallach <jordi@debian.org>
Description:
 sogo       - Scalable groupware server
 sogo-activesync - Scalable groupware server - ActiveSync module
Changes:
 sogo (5.12.13-1) unstable; urgency=medium
 .
   * New upstream release with security bugfixes:
     - SQL injection via login/UID in SQL user sources.
     - SQL injection via unvalidated session cookie.
     - Buffer overflow parsing BYDAY in recurrence rules.
     - LDAP filter injection in logins and address book searches.
     - Path traversal via mail draft names.
     - HTML mail sanitizer bypasses allowing remote content loading.
   * Drop workaround for gnustep regex handling, fixed in GNUStep.
   * Fix cherry-picked upstream patches, now included in 5.12.13.
Checksums-Sha1:
 1c1b3447abccf53212c0970db700471d6df6bfdf 102912 sogo-activesync-dbgsym_5.12.13-1_m68k.deb
 41fb34fe148b3b922f274c1f49d9998498233e6c 233008 sogo-activesync_5.12.13-1_m68k.deb
 8b433a927a6b33fc81b451876f6c54b07182196f 1212440 sogo-dbgsym_5.12.13-1_m68k.deb
 270c8c14c018c8e597a51a437affb488b0c4d33f 12919 sogo_5.12.13-1_m68k.buildinfo
 7bc00500fda948824d600fee0fb587dd4686b73c 1306200 sogo_5.12.13-1_m68k.deb
Checksums-Sha256:
 18e494fe8b9b64ac478dad447c4e04d19fb47470e41caa13f74061c9f80b3d39 102912 sogo-activesync-dbgsym_5.12.13-1_m68k.deb
 10b1dbfc69694341cf2a3e4153701d698ec4f0cd880b1369163e1560f94e613a 233008 sogo-activesync_5.12.13-1_m68k.deb
 983cf58d1499544393ad2e148f6217c56c3228670a623ee04df406e1f83b6940 1212440 sogo-dbgsym_5.12.13-1_m68k.deb
 6db2d90cc6b8ec5ffe5ed6ca937f95b9accbd2a2be7643203aa6934724d0e404 12919 sogo_5.12.13-1_m68k.buildinfo
 ff3374ba95ac2ede918b1619167816d6780e962575e5621ef22b5da453022d6e 1306200 sogo_5.12.13-1_m68k.deb
Files:
 6d7b46763474a88cd90023d84b431546 102912 debug optional sogo-activesync-dbgsym_5.12.13-1_m68k.deb
 efbe5d02ec793cb0265fa8b646d5b00a 233008 mail optional sogo-activesync_5.12.13-1_m68k.deb
 9948a1fe6a924e471b184043932c699d 1212440 debug optional sogo-dbgsym_5.12.13-1_m68k.deb
 6823b1997a2d00bbf8fd81cb97758845 12919 mail optional sogo_5.12.13-1_m68k.buildinfo
 961237e7d08705ddf7e9bea7a5e19a64 1306200 mail optional sogo_5.12.13-1_m68k.deb
Signed-By: Debian buildd autosigning key for m68k-osuosl-01 <buildd_m68k-m68k-osuosl-01@buildd.debian.org>

