Accepted sogo 5.12.10-1 (source) into unstable

Debian FTP Masters <[email protected]>
Newsgroups gmane.linux.debian.devel.changes.unstable
Message-ID <[email protected]>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 18 Aug 2026 00:36:57 +0200
Source: sogo
Architecture: source
Version: 5.12.10-1
Distribution: unstable
Urgency: medium
Maintainer: Debian SOGo Maintainers <[email protected]>
Changed-By: Jordi Mallach <[email protected]>
Changes:
 sogo (5.12.10-1) unstable; urgency=medium
 .
   * New upstream release with several security bugfixes:
     - possible SQL injection with specific request
     - several possible XSS injections with malicious mail
     - possible SSRF with specific request
     - possible shell injection when using sendmail
   * Drop cherry-picked event import patch from 5.12.9-1.
   * Drop source package Priority field, no longer needed.
   * Drop Rules-Requires-Root field, now an implicit default.
   * Add patch to use the correct regex template in html injection fix.
   * Make test_rendering's named-value ordering check order-independent.
Checksums-Sha1:
 a8fdc80d79ed0d30400a9b6d4d7f851ed8199181 2298 sogo_5.12.10-1.dsc
 279996242ad9b69d9f41c2d9d1c3caddf4232331 37856647 sogo_5.12.10.orig.tar.gz
 a244082e71960f820d3bccca4b62ccb133487b82 23652 sogo_5.12.10-1.debian.tar.xz
 b524ae82fbe4522939f7a1af50a7ef28d085a1db 13613 sogo_5.12.10-1_amd64.buildinfo
Checksums-Sha256:
 cb17280995a1faa9d901b778a3217328867dd599c022ed200590d2ea96cbc9a3 2298 sogo_5.12.10-1.dsc
 fde6b6cfed9c11afae6c327711ae25290e67df779487235cf8c094c7e0bd762c 37856647 sogo_5.12.10.orig.tar.gz
 e9d52914eac94cdc3ceafbbaf3528718b9d90b1a886db909c29ed8b58f037eb7 23652 sogo_5.12.10-1.debian.tar.xz
 c6d1d062117a6bbde7608c41b3fc0adcacc5dec9098ffc522847944a6a1441eb 13613 sogo_5.12.10-1_amd64.buildinfo
Files:
 01f63a5723c561a27fccc5af44aac502 2298 mail optional sogo_5.12.10-1.dsc
 2d4e10274adb42a37d21499b6ad7c04f 37856647 mail optional sogo_5.12.10.orig.tar.gz
 e728474bcf282653e3828923fe48cd26 23652 mail optional sogo_5.12.10-1.debian.tar.xz
 9ae978e91bab950f4150dfcf228fcccf 13613 mail optional sogo_5.12.10-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=vGFR
-----END PGP SIGNATURE-----
signature.asc (application/pgp-signature, 228 B)
-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaoOpmAAKCRCb9qggYcy5
IYm5AQCz4bTobLZK7XCbal/ek8S/CFJUPoJFEWO9YN0vlaTT+AD/XWKBDCQZ8NuX
C8Eib5paUMPl5cny7b9eg6XerFyY5gM=
=QWCH
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.