Hi everybody, after updating to SOGo 5.12.12, my SOGo instance didn't start anymore. I made the changes to the ldap hostname line in sogo.conf as suggested below:
hostname = ldaps://10.0.2.15:636?tlsVerifyMode=None; This lead to an error in the system journal: File NSDictionary.m: 671. In -[NSDictionary initWithContentsOfFile:] Contents of file '/etc/sogo/sogo.conf' does not contain a dictionary I put the value of the hostname line in double quotes, this solved the issue: hostname = "ldaps://10.0.2.15:636?tlsVerifyMode=None"; There is a corresponding bug in the SOGo bugtracker [1], but as my account has been downgraded to an observer in the bugtracker (why, BTW?), I can't comment there. Best regards, Paul [1] https://bugs.sogo.nu/view.php?id=6256 Am 13.10.26 um 14:41 schrieb "SOGo Reporter" ([email protected]):
SOGo 5.12.12 Release ANNOUNCEMENT SOGo 5.12.12 Release Dear SOGo community, The Alinto team is pleased to announce the immediate availability of SOGo v5.12.12. This is a major release as it fixes one security vulnerability. *IMPORTAN LDAP WITH SSL:* If you're using ldap with ssl with a self-signed certificate, you have to update your sogo.conf to tell sogo to not check it: Before: `hostname = ldaps://10.0.2.15:636;` After: `hostname = ldaps://10.0.2.15:636?tlsVerifyMode=None;` If not, sogo will force ldap client to check the certificate and throw error like this: /NAME:LDAPException REASON:operation bind failed: Can't contact LDAP server (0xFFFFFFFF)/ *IMPORTANT:* One vulnerability have been reported and fixed in this version 5.12.12 or since the nightly of the 13th of October 2026: `sogo_5.12.9.20261013`. * 1 possible SQL injection with specific request -> fixed Please read our post to get all the details <https://www.sogo.nu/news/2026/sogo-v51212-released.html> SOGo Team What is SOGo SOGo is a free and modern scalable groupware server. It offers shared calendars, address books and emails through your favorite Web browser or by using a native client such as Mozilla Thunderbird and Lightning, Apple Calendar and Address Book (Mac OS X and iOS) and Microsoft Outlook. SOGo is standard-compliant and supports CalDAV, CardDAV and reuses existing IMAP, SMTP and database servers - making the solution easy to deploy and interoperable with many applications. SOGo features: * Scalable architecture suitable for deployments from dozen to many thousand users * Rich, responsible Web-based interface aligned with Google Material Design guidelines * Improved integration with Mozilla Thunderbird and Lightning by using the SOGo Connector and the SOGo Integrator * Two-way synchronization support with any Microsoft ActiveSync-capable device (Apple iOS, Android, Windows Phone, BlackBerry 10) or Outlook 2013/2016/365 * Excellent native integration with Apple software (OS X and iOS) and Android-based devices and many more! SOGo and our connectors are completely free. Try Online <https://demo.sogo.nu/SOGo> Available accounts: *sogo1*, *sogo2* and *sogo3*. Their password is *sogo*. Helping SOGo is a collaborative effort in order to create the best Free and Open Source groupware solution. There are multiple ways you can contribute to the project: * Documentation reviews, enhancements and translations * Write test cases - if you know Python, join in! * Feature requests or by sharing your ideas * Participate to the discussion in mailing lists * Patches for bugs or enhancements <https://bugs.sogo.nu/> * Provide new translations <https://github.com/Alinto/sogo#translations> Feel free to send us your questions. You can also post them to the SOGo mailing list <https://mailing.sogo.nu/sympa/info/users>. Getting Support For any questions, do not hesitate to contact us by writing to [email protected] Customer support packages for SOGo are also available <https://www.sogo.nu/support.html#/commercial>. <https://floss.social/@SOGo> <https://www.linkedin.com/shareArticle?mini=true&url=https://www.linkedin.com/groups/4164805/&title=&summary=&source=> <https://github.com/Alinto/sogo/>
