-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 04 Jan 2026 17:27:30 +0100
Source: sogo
Binary: sogo sogo-activesync sogo-activesync-dbgsym sogo-dbgsym
Architecture: mipsel
Version: 5.8.0-2+deb12u1
Distribution: bookworm
Urgency: high
Maintainer: mipsel Build Daemon (mipsel-osuosl-05) <buildd_mips64el-mipsel-osuosl-05@buildd.debian.org>
Changed-By: Tobias Frost <tobi@debian.org>
Description:
 sogo       - Scalable groupware server
 sogo-activesync - Scalable groupware server - ActiveSync module
Closes: 1060925 1071163 1121952
Changes:
 sogo (5.8.0-2+deb12u1) bookworm; urgency=high
 .
   [ Tobias Frost ]
   * Non-maintainer upload.
   * Cherry-pick patch from salsa repo to fix below mentioned
     WSTG-INPV-02 issue. (The patch was present in the git repo,
     but the never released as part of a package)
   * CVE-2024-48104 - HTML Injection (Closes: #1060925)
   * CVE-2024-24510 - CSS Injection
   * CVE-2024-34462 - Cross Site Scripting (XSS) (Closes: #1071163)
   * CVE-2025-63498 - Cross Site Scripting (XSS)
   * CVE-2025-63499 - Cross Site Scripting (XSS) (Closes: #1121952)
 .
   [ Jordi Mallach ]
   * Add upstream fix for a WSTG-INPV-02 security issue, crash on
     invalid mailIdentities.
Checksums-Sha1:
 63f5212c9bc015bf3151f9ff365470d93d165c9b 94556 sogo-activesync-dbgsym_5.8.0-2+deb12u1_mipsel.deb
 321ff879f9d9c30fcfb9bd7c0dcf6c54d895fd22 163980 sogo-activesync_5.8.0-2+deb12u1_mipsel.deb
 a79cc74ae8256b3a57ee9f2ccd88f61d730a30db 1102740 sogo-dbgsym_5.8.0-2+deb12u1_mipsel.deb
 35f89a9c0527134fd7ca56e1998c2a436a9cb7a9 10951 sogo_5.8.0-2+deb12u1_mipsel-buildd.buildinfo
 d5becf406f725d53e8df7db17f344c376f23b168 939388 sogo_5.8.0-2+deb12u1_mipsel.deb
Checksums-Sha256:
 c0c2cdf23e92a60a057f4ca80dfd006577ea3db595f96ff4113a37426479638c 94556 sogo-activesync-dbgsym_5.8.0-2+deb12u1_mipsel.deb
 bb776eeffe7e3dfb585027c53280f420df49e539061e1cbe1324acbb767fa258 163980 sogo-activesync_5.8.0-2+deb12u1_mipsel.deb
 334122687f17dfa98ec235dbe34c2a71b66c31b516878750b7e1ff380d14de61 1102740 sogo-dbgsym_5.8.0-2+deb12u1_mipsel.deb
 5c5a818ae0eee85b0d291cd79a9a63a8ea838df6600eb7e496c4d531a8e55a5e 10951 sogo_5.8.0-2+deb12u1_mipsel-buildd.buildinfo
 6118ca5436b548208266437b296aebad6ff5fbda12fe22b0990c62c3d8bdc9b9 939388 sogo_5.8.0-2+deb12u1_mipsel.deb
Files:
 7c71577ebd33daac16b2194d5abd1436 94556 debug optional sogo-activesync-dbgsym_5.8.0-2+deb12u1_mipsel.deb
 f1bcbe1db6b89c529f98a1803c7b3281 163980 mail optional sogo-activesync_5.8.0-2+deb12u1_mipsel.deb
 718d96deee149d330ecf617fadf62d70 1102740 debug optional sogo-dbgsym_5.8.0-2+deb12u1_mipsel.deb
 9770fd70818fafa046fee8cfa18bf6d6 10951 mail optional sogo_5.8.0-2+deb12u1_mipsel-buildd.buildinfo
 cbeb4481eea59fa7a7276c4227d082b9 939388 mail optional sogo_5.8.0-2+deb12u1_mipsel.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEYLhEzFkGpb3yYRVHmlVdU6AM9BUFAmlawAwACgkQmlVdU6AM
9BUuDRAAsE0apbT5FtctoHIC/b3BoKLCioa4PGzEfenPmUdKjMMznv6RtdLGaI6d
uztcoXjTW4SRRtsLs1K/t6bYNttWBtYmdoqx+KyUhCC6ANYfJzXo90Dwh9TBBGld
RDMzgJdHDiQFbXAuNHjqlvt8R0ts5q1D8xf4fWN+AgAgPz4S05UXk9w4xQS2M/RB
HWsSmkU31qUyu7okB0fzYQQe2xpHHChHwfKVsmlgvKbeFboh4VmP7oZweTcsEM8T
Fv8rlMCKeHiR1FRvruQxPsmR0ltTlvmNjlH6XvYEzWK263idgOC/wGui+m//gCDa
Xf4cXAfrr25JALicUp08akJGJ6kibvXWcHIqs4nN3CGN7AZFJ0o+9WqhuqZyAqiO
mL3J3ABunpM1bYtNNVCORlYMjrjjaxEHTu1KiMT0j7b4rxmKzqGjJVgJVy5FVTCq
NqVFnj/9VVDAgFMGfqLpQUZL4tVi5y88zZCu/BRh6Q25UyE5aFagEE8cTGiofqpG
12kHbEQU1reNDcdLWCoNPBwgil1f4neFcXZMLnxnO6tbWUp3kuzi+Rcbg/PtrX27
2Lkt6Fe9Q1uBSlg1i251hV6tSDAJsITYP3BXp5lost3etvUZTppvwSE/gzOOBelI
/CNoboCrmNmON3e86PFVWGwuAhbl5hPGti0GOgroZjA3gl9KXQU=
=RgpW
-----END PGP SIGNATURE-----