From foo@bar  Tue Nov 10 21:20:04 2026
Format: 1.8
Date: Tue, 10 Nov 2026 13:30:52 +0100
Source: sogo
Binary: sogo sogo-activesync sogo-activesync-dbgsym sogo-dbgsym
Architecture: sh4
Version: 5.12.13-1
Distribution: sid
Urgency: medium
Maintainer: sh4 Build Daemon (sh4-gandi-02) <buildd@sh4-gandi-02.buildd.org>
Changed-By: Jordi Mallach <jordi@debian.org>
Description:
 sogo       - Scalable groupware server
 sogo-activesync - Scalable groupware server - ActiveSync module
Changes:
 sogo (5.12.13-1) unstable; urgency=medium
 .
   * New upstream release with security bugfixes:
     - SQL injection via login/UID in SQL user sources.
     - SQL injection via unvalidated session cookie.
     - Buffer overflow parsing BYDAY in recurrence rules.
     - LDAP filter injection in logins and address book searches.
     - Path traversal via mail draft names.
     - HTML mail sanitizer bypasses allowing remote content loading.
   * Drop workaround for gnustep regex handling, fixed in GNUStep.
   * Fix cherry-picked upstream patches, now included in 5.12.13.
Checksums-Sha1:
 16fece2096152aacd23e7a8a2871e79887dac966 105052 sogo-activesync-dbgsym_5.12.13-1_sh4.deb
 53afe6d98ee994c0301c64587e47b263acbd6d0c 274100 sogo-activesync_5.12.13-1_sh4.deb
 799a25ee13a48e9eb1dcd4197016b484af572e86 1253884 sogo-dbgsym_5.12.13-1_sh4.deb
 df3d1b312839a4a64dfd1fbe5cc910c55e23a550 12776 sogo_5.12.13-1_sh4.buildinfo
 ce708f1a240501045e0800bec0c382c814c242a8 1528528 sogo_5.12.13-1_sh4.deb
Checksums-Sha256:
 24b3b0a03b9d887d242c0f20859a799daae75621800005e050a965652fcfbda9 105052 sogo-activesync-dbgsym_5.12.13-1_sh4.deb
 f2b7331a2962898bbc3729d8354790544f6c1465b58ab1a4267342259efa59f6 274100 sogo-activesync_5.12.13-1_sh4.deb
 9202b3ec31a0a7cbfb000ce7274a29f33ad92f647d6633b9946c79610e876ae3 1253884 sogo-dbgsym_5.12.13-1_sh4.deb
 b39c4d78e2b63ae4cad7abdf29b4f5297979bf13ca68ef77703f8d835d60e680 12776 sogo_5.12.13-1_sh4.buildinfo
 5e5cd1e43d5ddbd5cb0f0df37c8219a5edd2339bc188442a7e94ae4ff0b9360b 1528528 sogo_5.12.13-1_sh4.deb
Files:
 e02b725bb7d38cf5564a339ee7e9fc44 105052 debug optional sogo-activesync-dbgsym_5.12.13-1_sh4.deb
 10e3078a6e722ba517f93d4067146145 274100 mail optional sogo-activesync_5.12.13-1_sh4.deb
 87ff12e5f98803aec7e850d0a8af4bb6 1253884 debug optional sogo-dbgsym_5.12.13-1_sh4.deb
 4af39597949e4c55821c6f939d20448d 12776 mail optional sogo_5.12.13-1_sh4.buildinfo
 1a369f0cc945468fb22249ce7c4d5dee 1528528 mail optional sogo_5.12.13-1_sh4.deb
Signed-By: Debian buildd autosigning key for sh4-gandi-02 <buildd_sh4-sh4-gandi-02@buildd.debian.org>