-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 04 Jan 2026 17:27:30 +0100 Source: sogo Binary: sogo sogo-activesync sogo-activesync-dbgsym sogo-dbgsym Architecture: mips64el Version: 5.8.0-2+deb12u1 Distribution: bookworm Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-03) Changed-By: Tobias Frost Description: sogo - Scalable groupware server sogo-activesync - Scalable groupware server - ActiveSync module Closes: 1060925 1071163 1121952 Changes: sogo (5.8.0-2+deb12u1) bookworm; urgency=high . [ Tobias Frost ] * Non-maintainer upload. * Cherry-pick patch from salsa repo to fix below mentioned WSTG-INPV-02 issue. (The patch was present in the git repo, but the never released as part of a package) * CVE-2024-48104 - HTML Injection (Closes: #1060925) * CVE-2024-24510 - CSS Injection * CVE-2024-34462 - Cross Site Scripting (XSS) (Closes: #1071163) * CVE-2025-63498 - Cross Site Scripting (XSS) * CVE-2025-63499 - Cross Site Scripting (XSS) (Closes: #1121952) . [ Jordi Mallach ] * Add upstream fix for a WSTG-INPV-02 security issue, crash on invalid mailIdentities. Checksums-Sha1: efd4bf4b3d72d6352e932cfada7854f4b7d35719 116600 sogo-activesync-dbgsym_5.8.0-2+deb12u1_mips64el.deb 02b56e9063cc2a19c4e69e5d958073f5e7c6d721 162440 sogo-activesync_5.8.0-2+deb12u1_mips64el.deb fc97fdb4a21f56cb8f84e4f65e5b831bff681e5f 1297256 sogo-dbgsym_5.8.0-2+deb12u1_mips64el.deb d5c904a2d7c3c9565e5667bdfb3aab3f5d0ca206 10989 sogo_5.8.0-2+deb12u1_mips64el-buildd.buildinfo 8e88a30099001deb56f5dec6e16e342a8d7b29c8 930612 sogo_5.8.0-2+deb12u1_mips64el.deb Checksums-Sha256: 3f3102ba66ae9c4db7f730fba9e800f0f0c3d7ae23765fd31dcefa041a5f3fdd 116600 sogo-activesync-dbgsym_5.8.0-2+deb12u1_mips64el.deb a20fa0be59bd722c581ab7af245e519b69412f7ae50f2b8e14953b9264c79f23 162440 sogo-activesync_5.8.0-2+deb12u1_mips64el.deb c584b5f6440191f19f6c8779ec63ae72983489fbd3e8c038b9bb2f78099d5957 1297256 sogo-dbgsym_5.8.0-2+deb12u1_mips64el.deb 2d839bdc4caee24ff75edca9453ce8473672dc24a2b72eed0648bab354f25544 10989 sogo_5.8.0-2+deb12u1_mips64el-buildd.buildinfo 052e5c12c2af7f197365f88fabc3127abc8c7f69a823f1af4c223d11a1b5d18f 930612 sogo_5.8.0-2+deb12u1_mips64el.deb Files: 7f7487329fed5b4020be2c7e6dd050a1 116600 debug optional sogo-activesync-dbgsym_5.8.0-2+deb12u1_mips64el.deb 5a43d1423d3d76e21887815f1c81932a 162440 mail optional sogo-activesync_5.8.0-2+deb12u1_mips64el.deb 7ff23b321595dd019257c27954a612c9 1297256 debug optional sogo-dbgsym_5.8.0-2+deb12u1_mips64el.deb 914f07dc910276776aa4bfc895eecccc 10989 mail optional sogo_5.8.0-2+deb12u1_mips64el-buildd.buildinfo 6a385f2f9eea291404b2ef308f068b0e 930612 mail optional sogo_5.8.0-2+deb12u1_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEesE3YcWKZXIkRPMemf85J+x5/aoFAmlawCYACgkQmf85J+x5 /arwPQ//Rp/ryrINmdDwJjd1phtml+tuob3n/fcmiO7WBY+0Np2Bl0+fSy06agu2 YVc+YYqA6OYmB93/VmCAU7Qy3LE8iKOtqO8xK7FtCLDfcnGFVqXmYtmp3Fy4FOY7 rcVvSvzOj/elDhe4JnECxxgiV+5WkMcixE8Y58a7NkZVf6eLlHL4MOX5EFykkGb1 2bAoTGqo5TkKNII6p9EKvr1T0TJjasypCufd54Zas6j1+ZCfpwazxcuSW0BgdQEt AQiuJlbjCYeHaE4doGnMNVclITnQ2ysacKrQly9JDZxdElLfvV75/Chwaq6DRDV6 wwj8Kn8TbYTskXWFk6dPAZYvFVD/D44TyQweev2hJju3RRKabvfgettitnu/Muwa pfiq5L7YVJmWV9FNJFaYStNFZpwoVsPHE75zbNCz6LE4BcopOq8uzW4uJ3yCBeTw wRA3TNMD38b806HYTkX3C7hFx0G12vCtPmysia5AtHBBFok6S0YompF18xQ2eMHP 562WUEZSn9hYRKELF5JMERIYf3W2NGbay9GjdTXWQsFEfFYnMCj9wTO0ZrHyjoQ/ sN9/NLV1CIPthsRGbqmZTj3lIK9yFGHtQsm4opTMPWBP3fOWpUnE0MS4abPTDyRK ebwgyN0Je2nXKvunIYcdvXXA5xQfI1HgE3y5gwa8IFGBv+Mwvc4= =0kxN -----END PGP SIGNATURE-----