[Pkg-sogo-maintainers] Bug#989479: sogo: CVE-2021-33054

[Jordi Mallach]

Hi Salvatore,

El dv. 04 de 06 de 2021 a les 23:07 +0200, en/na Salvatore Bonaccorso
va escriure:
> If you fix the vulnerability please also make sure to include the
> CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
> 
> For further information see:
> 
> [0] https://security-tracker.debian.org/tracker/CVE-2021-33054
>     https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33054
> [1]
> https://github.com/inverse-inc/sogo/commit/e53636564680ac0df11ec898304bc442908ba746
> 
> Please adjust the affected versions in the BTS as needed.

I have prepared a source package for bullseye, with a debdiff attached.

I have built it in a bullseye chroot, but I assume you'll want a source
only upload.

I'll upload as soon as you ack it, and will prepare a similar package
for buster at your request.

Thanks,
Jordi


-- 
Jordi Mallach <jordi at debian.org>
Debian Project