From foo@bar  Tue Nov 10 15:20:05 2026
Format: 1.8
Date: Tue, 10 Nov 2026 13:30:52 +0100
Source: sogo
Binary: sogo sogo-activesync sogo-activesync-dbgsym sogo-dbgsym
Architecture: ppc64
Version: 5.12.13-1
Distribution: sid
Urgency: medium
Maintainer: ppc64 / powerpc Build Daemon (debian-project-be-2) <debian-project-be-2@debian-project-be-2.buildd.org>
Changed-By: Jordi Mallach <jordi@debian.org>
Description:
 sogo       - Scalable groupware server
 sogo-activesync - Scalable groupware server - ActiveSync module
Changes:
 sogo (5.12.13-1) unstable; urgency=medium
 .
   * New upstream release with security bugfixes:
     - SQL injection via login/UID in SQL user sources.
     - SQL injection via unvalidated session cookie.
     - Buffer overflow parsing BYDAY in recurrence rules.
     - LDAP filter injection in logins and address book searches.
     - Path traversal via mail draft names.
     - HTML mail sanitizer bypasses allowing remote content loading.
   * Drop workaround for gnustep regex handling, fixed in GNUStep.
   * Fix cherry-picked upstream patches, now included in 5.12.13.
Checksums-Sha1:
 8d209a2a3ba921bb14e053247f152065fdde7a80 101808 sogo-activesync-dbgsym_5.12.13-1_ppc64.deb
 e602b52471eba9bb0aab85857d32b17caa146ab5 229304 sogo-activesync_5.12.13-1_ppc64.deb
 6772eb8139d9272e044c7e2843ab83265dc5c0cb 1227140 sogo-dbgsym_5.12.13-1_ppc64.deb
 790deaa5fbf5fc6a84721e54419db837adf63604 12959 sogo_5.12.13-1_ppc64.buildinfo
 42f762e755dd8ca02b1a751cae4a7ba88e3c91ae 1312840 sogo_5.12.13-1_ppc64.deb
Checksums-Sha256:
 f5671ee3ca729673c360e95873e9458cf7e8581e3f862419938fa395eefbc94c 101808 sogo-activesync-dbgsym_5.12.13-1_ppc64.deb
 35397c8367d79b489d9a4468fd4678f46c7db4a35a2e0a19ee726286f9ee9068 229304 sogo-activesync_5.12.13-1_ppc64.deb
 3110d54932978ff587417fb5f0fb5034124a170672302e8b042478488b5d4379 1227140 sogo-dbgsym_5.12.13-1_ppc64.deb
 da7f3d37a867b204bd169444510d2a1a438d18c3808ae3183f28e3987eafb173 12959 sogo_5.12.13-1_ppc64.buildinfo
 3e0646b23c5340bd42ae043ae5db1c9786c6285f5997cae2d44d39d27b066118 1312840 sogo_5.12.13-1_ppc64.deb
Files:
 5683663c17a4a0e4f9688b72d44f3fb5 101808 debug optional sogo-activesync-dbgsym_5.12.13-1_ppc64.deb
 e4682f3ed20016c5d624d36b86ccbb7f 229304 mail optional sogo-activesync_5.12.13-1_ppc64.deb
 ad2d85154cfe7819fca7414636be958b 1227140 debug optional sogo-dbgsym_5.12.13-1_ppc64.deb
 c9185cbbd185a644dc1f1f217ad4bf3c 12959 mail optional sogo_5.12.13-1_ppc64.buildinfo
 c94769a5dd37449d0c243f717ac6cc4c 1312840 mail optional sogo_5.12.13-1_ppc64.deb
Signed-By: Debian buildd autosigning key for debian-project-be-2 <buildd_ppc64-debian-project-be-2@buildd.debian.org>