[SOGo] Latest updates on SOGo

["SOGo Reporter"]

SOGo 5.12.8 Release ANNOUNCEMENT SOGo 5.12.8 Release Dear SOGo community, The Alinto team is pleased to announce the immediate availability of SOGo v5.12.8. This is a major release as it fixes security vulnerabilities. IMPORTANT Four major vulnerabilities have been reported and fixed in this version 5.12.8 or since the nightly of the 8th of May 2026: `sogo_5.12.7.20260508`. Those vulnerabilities affect any previous SOGO version. Please update as soon as possible CVE ID will be on our website once they're created. Affect anyone 2 possible XSS injections with malicious mail: fixed 1 possible SQL injection with specific request: fixed Affect SOGo when using OpenID with a non-matching usersource Impersonification with untrusted user source: fixed Regression Some regression, mainly on the mail view, can happen. If you find any, please report them bugs.sogo.nu Thanks dninh of SACOMBANK for the SQL injection. Luke H for one XSS injection. Greg Lesnewich from Proofpoint Threat Research for one XSS injection. Last one was found by us, Alinto Find the full post on our website SOGo Team What is SOGo SOGo is a free and modern scalable groupware server. It offers shared calendars, address books and emails through your favorite Web browser or by using a native client such as Mozilla Thunderbird and Lightning, Apple Calendar and Address Book (Mac OS X and iOS) and Microsoft Outlook. SOGo is standard-compliant and supports CalDAV, CardDAV and reuses existing IMAP, SMTP and database servers - making the solution easy to deploy and interoperable with many applications. SOGo features: Scalable architecture suitable for deployments from dozen to many thousand users Rich, responsible Web-based interface aligned with Google Material Design guidelines Improved integration with Mozilla Thunderbird and Lightning by using the SOGo Connector and the SOGo Integrator Two-way synchronization support with any Microsoft ActiveSync-capable device (Apple iOS, Android, Windows Phone, BlackBerry 10) or Outlook 2013/2016/365 Excellent native integration with Apple software (OS X and iOS) and Android-based devices and many more! SOGo and our connectors are completely free. Try Online Available accounts: sogo1, sogo2 and sogo3. Their password is sogo. Helping SOGo is a collaborative effort in order to create the best Free and Open Source groupware solution. There are multiple ways you can contribute to the project: Documentation reviews, enhancements and translations Write test cases - if you know Python, join in! Feature requests or by sharing your ideas Participate to the discussion in mailing lists Patches for bugs or enhancements Provide new translations Feel free to send us your questions. You can also post them to the SOGo mailing list. Getting Support For any questions, do not hesitate to contact us by writing to supp...@sogo.nu Customer support packages for SOGo are also available.