-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 22 Jul 2025 22:34:25 +0200
Source: sope
Architecture: source
Version: 5.12.1-2
Distribution: unstable
Urgency: medium
Maintainer: Debian SOGo Maintainers <pkg-sogo-maintainers@lists.alioth.debian.org>
Changed-By: Jordi Mallach <jordi@debian.org>
Closes: 1108798
Changes:
sope (5.12.1-2) unstable; urgency=medium
.
* [CVE-2025-53603] Add proposed patch to fix DoS-enabling segfault
(closes: #1108798).
* Cherry-pick two additional fixes from the 5.12.2 release.
- allow SMTP replies that don't adhere to the SMTP spec
- don't check for the auth bearer token
Checksums-Sha1:
aea662dbf6a0c906c5278649c10372b2101a164f 2148 sope_5.12.1-2.dsc
0768e0776601a76f12bf73802edea9fa9f018b49 9924 sope_5.12.1-2.debian.tar.xz
53dad0a70a7d18daaab1790740e06c097a3c28c7 10512 sope_5.12.1-2_amd64.buildinfo
Checksums-Sha256:
54571b84ba55cce08ecec3a11002fc7bc124d89d2fe8f71126e595b0e1bafb62 2148 sope_5.12.1-2.dsc
8df5699821cd87b79c797e95dd082e8de440ac612966412ac0f27276cc1b09af 9924 sope_5.12.1-2.debian.tar.xz
a3150a820209ac0ea580bcfc177f6e76dff42dbbd238700d71aea1299c206bef 10512 sope_5.12.1-2_amd64.buildinfo
Files:
f287b653ef5c5e1ccfc72fbdcc89dada 2148 libs optional sope_5.12.1-2.dsc
728b58eb3f74769214275f30d8c388db 9924 libs optional sope_5.12.1-2.debian.tar.xz
f4a94fd234fc26000bae5894fa7e918d 10512 libs optional sope_5.12.1-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=vI0N
-----END PGP SIGNATURE-----
Attachment:
pgpXoUDxMeCez.pgp
Description: PGP signature