[Pkg-sogo-maintainers] sogo_5.12.8-1_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 12 May 2026 11:53:29 +0200
Source: sogo
Architecture: source
Version: 5.12.8-1
Distribution: unstable
Urgency: medium
Maintainer: Debian SOGo Maintainers <pkg-sogo-maintainers at lists.alioth.debian.org>
Changed-By: Jordi Mallach <jordi at debian.org>
Changes:
 sogo (5.12.8-1) unstable; urgency=medium
 .
   * New upstream release, with 4 security fixes:
     - require that a UID exists before adding it to a folder's ACL
     - XSS mitigations for mail Subject rendering
     - strip dangerous HTML event attributes from ICS invitations
     - OpenId: verify the user's email domain and ensure the account exists in
       the local source before granting access
   * Update test after XSS sanitization changes.
Checksums-Sha1:
 2070381e07c20fee3ce17ade6f2f63056093353e 2291 sogo_5.12.8-1.dsc
 16776012b872090f6c87ee63a30ce2f2ffe075c6 37848204 sogo_5.12.8.orig.tar.gz
 589fd1124f351564dc70c25ca00469f6b94f11d2 21904 sogo_5.12.8-1.debian.tar.xz
 dba205a74f1ad0fc051b42c61e8fc07c674f2d37 13797 sogo_5.12.8-1_amd64.buildinfo
Checksums-Sha256:
 47f8ac64d40b0961245bedc36a0eb961894c45971fdd3138779887ad18a86338 2291 sogo_5.12.8-1.dsc
 05f81b604651f72de94c8bb012cc5e6aea17f8d3281161423fee6f091dd2a0e9 37848204 sogo_5.12.8.orig.tar.gz
 963a92609cf82f381f279b0a06a6c8550dd1c4713f2595de8e08bd69805b951f 21904 sogo_5.12.8-1.debian.tar.xz
 a02eb6dd79263f9320a0fce9d859493b4af374db28e2d7e6ae1d0ac6324edc77 13797 sogo_5.12.8-1_amd64.buildinfo
Files:
 3ca8f90f7784e42bbd415d933ea5f1d9 2291 mail optional sogo_5.12.8-1.dsc
 0989b9591923eb5d58bb60993722da1f 37848204 mail optional sogo_5.12.8.orig.tar.gz
 452634f9eceac676beee209fdc90c704 21904 mail optional sogo_5.12.8-1.debian.tar.xz
 48a9faa3b44e3141d2144831d65b0c2c 13797 mail optional sogo_5.12.8-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=SUoM
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-sogo-maintainers/attachments/20260512/4bb76cac/attachment.sig>