-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 04 Jan 2026 17:27:30 +0100
Source: sogo
Binary: sogo sogo-activesync sogo-activesync-dbgsym sogo-dbgsym
Architecture: ppc64el
Version: 5.8.0-2+deb12u1
Distribution: bookworm
Urgency: high
Maintainer: ppc64el Build Daemon (ppc64el-conova-01) <buildd_ppc64el-ppc64el-conova-01@buildd.debian.org>
Changed-By: Tobias Frost <tobi@debian.org>
Description:
 sogo       - Scalable groupware server
 sogo-activesync - Scalable groupware server - ActiveSync module
Closes: 1060925 1071163 1121952
Changes:
 sogo (5.8.0-2+deb12u1) bookworm; urgency=high
 .
   [ Tobias Frost ]
   * Non-maintainer upload.
   * Cherry-pick patch from salsa repo to fix below mentioned
     WSTG-INPV-02 issue. (The patch was present in the git repo,
     but the never released as part of a package)
   * CVE-2024-48104 - HTML Injection (Closes: #1060925)
   * CVE-2024-24510 - CSS Injection
   * CVE-2024-34462 - Cross Site Scripting (XSS) (Closes: #1071163)
   * CVE-2025-63498 - Cross Site Scripting (XSS)
   * CVE-2025-63499 - Cross Site Scripting (XSS) (Closes: #1121952)
 .
   [ Jordi Mallach ]
   * Add upstream fix for a WSTG-INPV-02 security issue, crash on
     invalid mailIdentities.
Checksums-Sha1:
 9f0d0e4293260916369f46a043cc691983a9a37d 93372 sogo-activesync-dbgsym_5.8.0-2+deb12u1_ppc64el.deb
 ad1a432a6fe4a7f219c322a06688ecd175240f63 186700 sogo-activesync_5.8.0-2+deb12u1_ppc64el.deb
 7fd0d58a043861cbb9b344cabb2af37e61df66f7 1092856 sogo-dbgsym_5.8.0-2+deb12u1_ppc64el.deb
 6266ebcd5bf534bcf09bc3da7d9fc6628550871e 11175 sogo_5.8.0-2+deb12u1_ppc64el-buildd.buildinfo
 90407ea92ef172b13f8d75f37caaa368e11d143c 1146688 sogo_5.8.0-2+deb12u1_ppc64el.deb
Checksums-Sha256:
 9ce4e5466493baa07df0c80f011bd42fdb3e454fc1bed4af875042822204a95b 93372 sogo-activesync-dbgsym_5.8.0-2+deb12u1_ppc64el.deb
 96d50966810830889518bd84703b6a9ce0de4a1e5e8178be1f33444ad767eb49 186700 sogo-activesync_5.8.0-2+deb12u1_ppc64el.deb
 fa8069e683a93a50d5f6e9c5a90e971cb0b8c96359e19dfc16e7923fce551333 1092856 sogo-dbgsym_5.8.0-2+deb12u1_ppc64el.deb
 ce008a830d91afa25bfb0640a2ed31ef481e08045422b6a75d91b0a9b8fefcd6 11175 sogo_5.8.0-2+deb12u1_ppc64el-buildd.buildinfo
 2e967b38e888cb89ae8587171e45757b657601f547814eebdd78647132d74e2d 1146688 sogo_5.8.0-2+deb12u1_ppc64el.deb
Files:
 0078112ad06e51bd7df685908e553572 93372 debug optional sogo-activesync-dbgsym_5.8.0-2+deb12u1_ppc64el.deb
 5a2aa05f6f2f3bd8811fe79f06db22c1 186700 mail optional sogo-activesync_5.8.0-2+deb12u1_ppc64el.deb
 cad2456f07a6d0e7089f57be5219afed 1092856 debug optional sogo-dbgsym_5.8.0-2+deb12u1_ppc64el.deb
 055cfb774815560af0ef25287161b73e 11175 mail optional sogo_5.8.0-2+deb12u1_ppc64el-buildd.buildinfo
 6154aa64a9bd94d3a187bceec1899e33 1146688 mail optional sogo_5.8.0-2+deb12u1_ppc64el.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEDoRc43uRWMOoIqIgDNLUPhbmg7MFAmlav70ACgkQDNLUPhbm
g7MfOQ//TDV4XK8ztjJqox8QUXlq6QJZEikpZeYzkXmWdA+Wheeaykv46olV0BQO
pAr3ChaIMOPm4ePj2YAYiFpeWXzgjnrH0FpFYslC1vF27ltkWnngBGZsAqptzfO1
c3SbSS2ONR3/z7SvHmC2BlIrsKLRy5KR6TcA6085CZPxsd1JFAxDdeHjEkDiIxR9
Vn46uwxApYU7UdJu4sOeN8J52k4c8IGhKL+hbYbnavezTixf+kRkLLey2TMvk8fd
c8iceAMhrdyHPgau2jTqZ7uavt39BvXyq20jJbNg3tMsG5jr/+hkFGMiQrp3AEpm
wPvifGDuxRgVx42f6CSre5eVn0MBxfJ6P+aqi7KPZdUUBLWqUdwVlEAzMX9quvlZ
XWe8irHhnDd8wb2ieXleo3d3WrtXCePVABOcnWm3F1CNgMAmEGTE8acMskPYxe0l
6MTWU0cW7hPK+616ZkCy9oQUpdkQmYGTCaFoXmtIotZvS/qfjm5MRy8ZHuEvtEHC
TkjdrBrQFteFDgHm+Obxb9uoJCtR6ScznIKOuEohzz0L7l8+wwysnXm6wPRxTTpi
csRgToj3zcviHoP9+CmeDrM7G3D5oStHIXC7vIvEm6qqvdlNNPE+YBExUXikQVED
y5obLq3qxXv42siAzbVnYpAtPHydHGPbOS2JPcrAslkGM3wTm/Q=
=yrLo
-----END PGP SIGNATURE-----