-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 18 Aug 2026 00:36:57 +0200 Source: sogo Architecture: source Version: 5.12.10-1 Distribution: unstable Urgency: medium Maintainer: Debian SOGo Maintainers <[email protected]> Changed-By: Jordi Mallach <[email protected]> Changes: sogo (5.12.10-1) unstable; urgency=medium . * New upstream release with several security bugfixes: - possible SQL injection with specific request - several possible XSS injections with malicious mail - possible SSRF with specific request - possible shell injection when using sendmail * Drop cherry-picked event import patch from 5.12.9-1. * Drop source package Priority field, no longer needed. * Drop Rules-Requires-Root field, now an implicit default. * Add patch to use the correct regex template in html injection fix. * Make test_rendering's named-value ordering check order-independent. Checksums-Sha1: a8fdc80d79ed0d30400a9b6d4d7f851ed8199181 2298 sogo_5.12.10-1.dsc 279996242ad9b69d9f41c2d9d1c3caddf4232331 37856647 sogo_5.12.10.orig.tar.gz a244082e71960f820d3bccca4b62ccb133487b82 23652 sogo_5.12.10-1.debian.tar.xz b524ae82fbe4522939f7a1af50a7ef28d085a1db 13613 sogo_5.12.10-1_amd64.buildinfo Checksums-Sha256: cb17280995a1faa9d901b778a3217328867dd599c022ed200590d2ea96cbc9a3 2298 sogo_5.12.10-1.dsc fde6b6cfed9c11afae6c327711ae25290e67df779487235cf8c094c7e0bd762c 37856647 sogo_5.12.10.orig.tar.gz e9d52914eac94cdc3ceafbbaf3528718b9d90b1a886db909c29ed8b58f037eb7 23652 sogo_5.12.10-1.debian.tar.xz c6d1d062117a6bbde7608c41b3fc0adcacc5dec9098ffc522847944a6a1441eb 13613 sogo_5.12.10-1_amd64.buildinfo Files: 01f63a5723c561a27fccc5af44aac502 2298 mail optional sogo_5.12.10-1.dsc 2d4e10274adb42a37d21499b6ad7c04f 37856647 mail optional sogo_5.12.10.orig.tar.gz e728474bcf282653e3828923fe48cd26 23652 mail optional sogo_5.12.10-1.debian.tar.xz 9ae978e91bab950f4150dfcf228fcccf 13613 mail optional sogo_5.12.10-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE6BdUhsApKYN8KGoWJVAvb8vjywQFAmqDotcACgkQJVAvb8vj ywR8Ew//fcLZP9Ay4Bjtk60TS+YsBkxeuo98Fw4um278XP8pt4YXFMyPifzVBdTC dA6+JmLvAckFQQSnmlTe72hJp2J5Ay+P05p0y3JBoyeJ/4U4FGmNs9Ggs9jXgCMz 6GPo9WaqY5eOt4fVSp2UiMY/NcrasoqGnyZDeVL3BFGyfHSV2kjZKQ80fZzndoqG q2Q0WcTWpph1fX60CObVPMHE9m1d1XeoI+nXTfvVI3Fpx70s55Vnu2EA8GnBuH/W FEqw1nZ4YwpUlbsDXi5IU8k6bAcNYSlpwKPTtQAtefexmkS6tQCGCHSQR/0Ez2/h CvlZqb0o9Pvvy/c35DcTmhtCIIQ4FXLzpcNxImY94aS0LmPPNc58mNlDX4NGDQXe hkMw/PdeRDKWv/wcaD8RXyZhEH955exMmqHsT3lw2bbJt4gLzaqDvANjvYMMGXAl C5BD4D0nclTaG4AFKTSCJBPZhejVJvwFcN0DhnbtrGnDo10mhsVtZ7+giUYocMsu qm48JUgRuCEYqeM6y8BuRjg1ron7a13dSAVhZ6uJPqe+jdDtoZM9n7KlMZ+s8YTN tMUMtvz/qMdc2zcTFTFcUeTL6iQYbP+dhVFKGTaY5ctadHti79if40Sc5bFzcKi5 lwbwjiL8dTLCNnm8p5XxK42Y3Wunhi2cOmrdhUgrRBNruSslx2I= =vGFR -----END PGP SIGNATURE-----
pgptEM4JwQV4P.pgp
Description: PGP signature
