From foo@bar  Tue Nov 10 15:20:06 2026
Format: 1.8
Date: Tue, 10 Nov 2026 13:30:52 +0100
Source: sogo
Binary: sogo sogo-activesync sogo-activesync-dbgsym sogo-dbgsym
Architecture: sparc64
Version: 5.12.13-1
Distribution: sid
Urgency: medium
Maintainer: sparc64 Build Daemon (sompek) <buildd3@sompek.debian.net>
Changed-By: Jordi Mallach <jordi@debian.org>
Description:
 sogo       - Scalable groupware server
 sogo-activesync - Scalable groupware server - ActiveSync module
Changes:
 sogo (5.12.13-1) unstable; urgency=medium
 .
   * New upstream release with security bugfixes:
     - SQL injection via login/UID in SQL user sources.
     - SQL injection via unvalidated session cookie.
     - Buffer overflow parsing BYDAY in recurrence rules.
     - LDAP filter injection in logins and address book searches.
     - Path traversal via mail draft names.
     - HTML mail sanitizer bypasses allowing remote content loading.
   * Drop workaround for gnustep regex handling, fixed in GNUStep.
   * Fix cherry-picked upstream patches, now included in 5.12.13.
Checksums-Sha1:
 1c46ecb3245c06daa122319d484468e3c82354f4 101932 sogo-activesync-dbgsym_5.12.13-1_sparc64.deb
 3c9ba2ecc5f72ae762a0c0b8b6f769759373a0a0 219444 sogo-activesync_5.12.13-1_sparc64.deb
 703b7cab50fcffaf45b5b0da05351c031c5b038d 1216168 sogo-dbgsym_5.12.13-1_sparc64.deb
 b6e4006cec6a8fa93e2a2313c5431e2b394e92fc 12867 sogo_5.12.13-1_sparc64.buildinfo
 9c8a962915446f9bf83d771dd21639d5c68999bd 1168528 sogo_5.12.13-1_sparc64.deb
Checksums-Sha256:
 185b37bde7461883f59888ebca312dcff44777e9b2c826b6aba43c0cae648fde 101932 sogo-activesync-dbgsym_5.12.13-1_sparc64.deb
 5eed28338621b1596b553714dc273e51b4e2ac1c2a3e870f88c7a2eaea41f6d7 219444 sogo-activesync_5.12.13-1_sparc64.deb
 b35ffdc53322c31ce759b19cab29f014a2345ab151da46b99fa24275ac3cf239 1216168 sogo-dbgsym_5.12.13-1_sparc64.deb
 407624ec741544dcf95a633fe84eaa07e9483f9f3edb7a451576e411bc4daddd 12867 sogo_5.12.13-1_sparc64.buildinfo
 adb2f891092b4149a8bd3cb6c91df38efef06b776d94c0f63375bb43f2fb2403 1168528 sogo_5.12.13-1_sparc64.deb
Files:
 d76b0203fa906d678ddb04f80f25770a 101932 debug optional sogo-activesync-dbgsym_5.12.13-1_sparc64.deb
 7eaa4c85e7d20ad3055bf4f1066de67a 219444 mail optional sogo-activesync_5.12.13-1_sparc64.deb
 db7b9a510f14077cb3de249c33e0d7e3 1216168 debug optional sogo-dbgsym_5.12.13-1_sparc64.deb
 3f827b7b68226bd77f18c78105ac1713 12867 mail optional sogo_5.12.13-1_sparc64.buildinfo
 48597c8c6ef84373eb64deeefda38173 1168528 mail optional sogo_5.12.13-1_sparc64.deb
Signed-By: Debian buildd autosigning key for sompek <buildd_sparc64-sompek@buildd.debian.org>