-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 11 Oct 2026 19:27:09 +0200
Source: sogo
Binary: sogo sogo-activesync sogo-activesync-dbgsym sogo-dbgsym
Architecture: ppc64el
Version: 5.12.1-3+deb13u3
Distribution: trixie-security
Urgency: medium
Maintainer: ppc64el Build Daemon (ppc64el-osuosl-02) <buildd_ppc64el-ppc64el-osuosl-02@buildd.debian.org>
Changed-By: Peter Wienemann <wiene@debian.org>
Description:
 sogo       - Scalable groupware server
 sogo-activesync - Scalable groupware server - ActiveSync module
Closes: 1142810 1148454
Changes:
 sogo (5.12.1-3+deb13u3) trixie-security; urgency=medium
 .
   * Non-maintainer upload.
   * Add patch to fix a regression introduced by fix for CVE-2026-33550
     (Closes: #1142810)
   * Add patch to fix shell injection by disabling sendmail
   * Add patch to fix SQL injection: properly parse MKCOL request
   * Add patch to fix XSS: escape angularJS directive for description
   * Add patch to add stripAngular to stringWithoutHTMLInjection calls
     This is a follow-up change to the XSS fix escaping angularJS directive.
   * Add patch to fix SSRF: do not transmit og http status to external calendar
   * Add patch to fix CVE-2026-93453: password reset poisoning
     (Closes: 1148454)
   * Add patch to fix XSS: use legitimate sorting value
   * Add patch to fix XSS issues addressed in upstream PR 395
Checksums-Sha1:
 db92da0501ece7adbc7ad1e6d1f6dc9b67e9b344 102396 sogo-activesync-dbgsym_5.12.1-3+deb13u3_ppc64el.deb
 f7338ea000b23036f01eb19b1deebcf38fbafb51 223240 sogo-activesync_5.12.1-3+deb13u3_ppc64el.deb
 4f1a36c0ec3e2b294b53f01815f4b3f8028d55f6 1192908 sogo-dbgsym_5.12.1-3+deb13u3_ppc64el.deb
 74847d49747e9d0fb4fdc57541c895a73876431d 14137 sogo_5.12.1-3+deb13u3_ppc64el-buildd.buildinfo
 3440fa10fbf6b5757b52a5dbac6bbe0763403348 1300496 sogo_5.12.1-3+deb13u3_ppc64el.deb
Checksums-Sha256:
 eae143a0aded76f8444622a4178f8f9f93562c6bafcfb1693246c1e1bff042c0 102396 sogo-activesync-dbgsym_5.12.1-3+deb13u3_ppc64el.deb
 28730bdc6e77df03a647a98c62d616d15018739bf71555617482f795200f9974 223240 sogo-activesync_5.12.1-3+deb13u3_ppc64el.deb
 9f8c2188971bf0bdcd666402a63070b9a8401539dc71b25102e9d52358a83a49 1192908 sogo-dbgsym_5.12.1-3+deb13u3_ppc64el.deb
 571a5addc4fb83a567880e9963dff3183bb98bb6618f6737b49e287885231040 14137 sogo_5.12.1-3+deb13u3_ppc64el-buildd.buildinfo
 f081e5dee113f7d7b8af607285929a3f66e72d9e45d87f86cfc21bd5232826be 1300496 sogo_5.12.1-3+deb13u3_ppc64el.deb
Files:
 cb937386d78e21d03ae67652359a5da3 102396 debug optional sogo-activesync-dbgsym_5.12.1-3+deb13u3_ppc64el.deb
 a8b53f2ac4aca3433f98fcf4e1c789b6 223240 mail optional sogo-activesync_5.12.1-3+deb13u3_ppc64el.deb
 d1109f80debd4791a73ee2de335edcd0 1192908 debug optional sogo-dbgsym_5.12.1-3+deb13u3_ppc64el.deb
 5449ec5d13079e4251f717a9678c141e 14137 mail optional sogo_5.12.1-3+deb13u3_ppc64el-buildd.buildinfo
 49a1c5d598486112d563b9013891ef1f 1300496 mail optional sogo_5.12.1-3+deb13u3_ppc64el.deb

-----BEGIN PGP SIGNATURE-----
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=6x6N
-----END PGP SIGNATURE-----