From foo@bar  Tue Nov 10 15:20:06 2026
Format: 1.8
Date: Tue, 10 Nov 2026 13:30:52 +0100
Source: sogo
Binary: sogo sogo-activesync sogo-activesync-dbgsym sogo-dbgsym
Architecture: x32
Version: 5.12.13-1
Distribution: sid
Urgency: medium
Maintainer: x32 Build Daemon (x32-do-01) <buildd@x32-do-01.buildd.org>
Changed-By: Jordi Mallach <jordi@debian.org>
Description:
 sogo       - Scalable groupware server
 sogo-activesync - Scalable groupware server - ActiveSync module
Changes:
 sogo (5.12.13-1) unstable; urgency=medium
 .
   * New upstream release with security bugfixes:
     - SQL injection via login/UID in SQL user sources.
     - SQL injection via unvalidated session cookie.
     - Buffer overflow parsing BYDAY in recurrence rules.
     - LDAP filter injection in logins and address book searches.
     - Path traversal via mail draft names.
     - HTML mail sanitizer bypasses allowing remote content loading.
   * Drop workaround for gnustep regex handling, fixed in GNUStep.
   * Fix cherry-picked upstream patches, now included in 5.12.13.
Checksums-Sha1:
 a5f4b0d9459c42b39d3a74ccf546f539750e2646 105352 sogo-activesync-dbgsym_5.12.13-1_x32.deb
 058aa0a40894457ee42e9dc274e729030e1f56ac 262452 sogo-activesync_5.12.13-1_x32.deb
 13407e3aefbc3f16d1462f455f710c4f48eb77cd 1246368 sogo-dbgsym_5.12.13-1_x32.deb
 a59c6ac347178d9a41c20a91e245332baadffaed 12993 sogo_5.12.13-1_x32.buildinfo
 0ab6a68f9a9935255433c39f3725730a88c7219e 1478516 sogo_5.12.13-1_x32.deb
Checksums-Sha256:
 737f4a423f69619730ec7a61888d1ef62dcbc17c99018678611d69df64652290 105352 sogo-activesync-dbgsym_5.12.13-1_x32.deb
 69e2ee47ece93c4ac968fb12453fdf085c5c42febfea47c31098b551d2ab2298 262452 sogo-activesync_5.12.13-1_x32.deb
 157a7114fcb5e1472009597a8c1844a1216d20a38880c4d1ff6a541f9c0cb8d6 1246368 sogo-dbgsym_5.12.13-1_x32.deb
 d6fbd173b33eabc5200e586a034f2d61fee8eb956e62199832f4acb66c551de5 12993 sogo_5.12.13-1_x32.buildinfo
 222a6a7825682a0216b4d9ee01b6af34ddf26d53256e1049beec683b6b66a185 1478516 sogo_5.12.13-1_x32.deb
Files:
 27cbcf03068ad713b80f33b7dd974cab 105352 debug optional sogo-activesync-dbgsym_5.12.13-1_x32.deb
 bc70cec99b2b64a06da073c573e78eaf 262452 mail optional sogo-activesync_5.12.13-1_x32.deb
 297cb3656117c68532f2f880aae6f776 1246368 debug optional sogo-dbgsym_5.12.13-1_x32.deb
 cfe2ab098e9239d503ff777925d98025 12993 mail optional sogo_5.12.13-1_x32.buildinfo
 1b9df00dba568c6300ebc46ef873954b 1478516 mail optional sogo_5.12.13-1_x32.deb
Signed-By: Debian buildd autosigning key for x32-do-01 <buildd_x32-x32-do-01@buildd.debian.org>