-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 11 Nov 2021 22:36:02 +0100 Source: sogo Architecture: source Version: 4.0.7-1+deb10u2 Distribution: buster-security Urgency: high Maintainer: Debian SOGo Maintainers <pkg-sogo-maintainers@lists.alioth.debian.org> Changed-By: Jordi Mallach <jordi@debian.org> Closes: 989479 Changes: sogo (4.0.7-1+deb10u2) buster-security; urgency=high . * [CVE-2021-33054] fixes validation of SAML message signatures (closes: #989479) Checksums-Sha1: 99a6a8103a52e0cad5c31340b026b1f2aa46040f 2142 sogo_4.0.7-1+deb10u2.dsc 70993f335a1aa685721efa6dc2830a9f0a85b39f 34561851 sogo_4.0.7.orig.tar.gz 9d2c1886c468a9ec9b33da55ecce61d38f96cc71 16092 sogo_4.0.7-1+deb10u2.debian.tar.xz 9bf77184668833452a34363897dd1d83395eb223 10380 sogo_4.0.7-1+deb10u2_amd64.buildinfo Checksums-Sha256: 9b6ceb691d1915140e5062c8d84a3cd2c6102f219d526b8d45be43b3ad884963 2142 sogo_4.0.7-1+deb10u2.dsc da75a51c38d8e34c4df7af0d643f1780a0ef8cacfa81b50028a8af9510cc0efd 34561851 sogo_4.0.7.orig.tar.gz 0b9a6f8ba1713a0bfe10c91d7ba2ea0ab0eac34a3282cc1596cb601d0dd091f6 16092 sogo_4.0.7-1+deb10u2.debian.tar.xz b0a804b662b79ef572dbf47d61e51c615b102b848774ed56a9dbf8e79797b83f 10380 sogo_4.0.7-1+deb10u2_amd64.buildinfo Files: 749bb2fd1e574c705548486a67a20cf7 2142 mail optional sogo_4.0.7-1+deb10u2.dsc 9528263eb8f13cee637ff869ca21d81c 34561851 mail optional sogo_4.0.7.orig.tar.gz bec82537b995b4dd8f498c42c0ef9961 16092 mail optional sogo_4.0.7-1+deb10u2.debian.tar.xz 355752f44505f3a5f617fd2203e3125d 10380 mail optional sogo_4.0.7-1+deb10u2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE6BdUhsApKYN8KGoWJVAvb8vjywQFAmG8WeEACgkQJVAvb8vj ywQnmxAAmpM8IVU7ySZY13ZgeuLT7uLAFqQrjhmXVA0afZ4U5wSkmqYBbufOekZK bgQi42XaXtL80344yjBY4JcTo7EXvEq+0h4vSZDGhMGN05FO/MBR0YfSm6iY5bgR mZfHXC+HUHySN6Qb6BIAWkz5+I2XOAWZfEVbtiPz/8+JQoFnyki9QEHuauxeIvR1 nxdFqRbnmFge2/m6/omH8AQmiQt1XllWHDlxikePJvJNqtneCOcS0Jyu2d0/lv4i osWYZbGxOt7ZbpusLUhtQlHSGI5edz3tynxZsB/4pFeyzyqNP9JbOzrYeJPA0WYx mRurLnt0DSTVc6SM/9jdAuvI9AP2qhckD/50xBiwU2nLkq4eogWyAEW/jdWE9rm/ nds4bCVR8em90JyYkCGdUNOBRaXDUMx4+gAEfQ7sTGJUrCrKkDNahiXp2KBe8pMV o/P3XBwzfPfF0g99rivaasNTpbwMekvLULNDnY6XE4M4r1Da9/8G6aul5ZPfTcYz 1x/PbV8d/0ouBW9AK0EXkAVGCb8VoTHbRshCN96LiJ7AmYS3wTa6HxpWY7LHu1CQ 8qQwtwlllfe0w32+GO5uUtVVBoPaw6f9LNeOzwYuEc6H9rkYmTkvNiGrHNegqkBn 0Wc09WqLl++KJ50pk5ctY/QvMoha4aM2CH0FMUVKtuSkj1fS8dU= =x7iy -----END PGP SIGNATURE-----