Debian Patches

Status for sogo/5.12.12-1

Patch Description Author Forwarded Bugs Origin Last update
disable_is_localhost_test.patch Don't run the isLocalhost unit test. It needs libnss-myhostname and fails in many build environments.

===================================================================
Jordi Mallach <jordi@debian.org> not-needed debian
libxml2.patch Use pkg-config instead of xml2-config to find libxml2.
===================================================================
Jordi Mallach <jordi@debian.org> no debian
0002-Change-sogo-backup-location-and-update-cronjob.patch Change sogo-backup location and update cronjob
Change sogo-backup location to /var/backups/sogo and update
sogo-backup.sh location in cronjob to /usr/sbin/sogo-backup.
Jeroen Dekkers <jeroen@dekkers.ch> no 2013-04-13
0003-Fix-may-be-used-uninitialized-in-this-function-warni.patch Fix "may be used uninitialized in this function" warnings.

===================================================================
Jeroen Dekkers <jeroen@dekkers.ch> yes 2014-04-09
0005-Remove-build-date.patch Remove build date Jeroen Dekkers <jeroen@dekkers.ch> no 2014-10-05
fix_test_rendering_named_value_order.patch Make test_rendering's named-value ordering check order-independent CardVersitRenderer renders a CardElement's named values by iterating
NSDictionary's -allKeys, whose enumeration order is not guaranteed by
the Foundation/GNUstep contract. test_rendering's case 5 hard-coded
only two of the six possible orderings of its three named values
(NAMED1/NAMED2/NAMED3), which happened to be the only two produced on
little endian architectures. On big endian architectures a third,
equally valid, ordering is produced instead, causing the test to fail
even though the rendered vCard is functionally correct.
.
Rewrite the assertion to accept any of the six possible orderings of
the three named fragments, which makes the test pass on every
architecture and removes the need to disable it on big endian.

===================================================================
Jordi Mallach <jordi@debian.org> not-needed 2026-08-18
0007-Do-not-use-OpenSSL-when-we-are-configured-to-use-Gnu.patch Do not use OpenSSL when we are configured to use GnuTLS Jeroen Dekkers <jeroen@dekkers.ch> no 2019-01-13
0008-Unset-MAKEFLAGS-and-MFLAGS-in-configure.patch Unset MAKEFLAGS and MFLAGS in configure
This fixes a build failure when building the package with parallel
make.
Jeroen Dekkers <jeroen@dekkers.ch> no 2019-01-13
0009-Omit-signedViewer-altogether-when-not-using-openssl.patch Omit signedViewer altogether when not using openssl Hanno Stock <hanno.stock@indurad.com> no 2019-07-30
python3.patch Run gen-saml2-exceptions.py with python3.
===================================================================
Jordi Mallach <jordi@debian.org> no
cross.patch Fix FTCBFS. Yavor Doganov <yavor@gnu.org> no 2025-01-26
fix_mime_address_generation_test.patch Fix brittle MIME address generation test The NGMimeAddressHeaderFieldGenerator test fails in isolated build environments
(like Debian sbuild) because the SOGo framework resources are not fully
assembled/installed. This causes NGMime to fall back to a default encoding
that results in "doubled" address strings for simple inputs. This patch
allows the test to accept both the standard and the fallback formats.

===================================================================
Jordi Mallach <jordi@debian.org> not-needed 2026-05-12
gnustep_base_empty_regex_replacement.patch Work around gnustep-base returning nil for empty regex replacements -[NSRegularExpression stringByReplacingMatchesInString:...] in gnustep-base
returns nil instead of an empty string when every character is replaced,
because it treats ICU's U_STRING_NOT_TERMINATED_WARNING as an error.
.
In stringWithoutHTMLInjection this raised an exception that left the input
half sanitised, e.g. "javajavascript:script:" came out as "javascript:",
failing test_stringWithoutHTMLInjection. Map nil to @"" so the result is
correct with both fixed and unfixed gnustep-base.

===================================================================
Jordi Mallach <jordi@debian.org> no upstream 2026-10-07
session_key_base64_check.patch fix(user): check session key value before using it
Includes the follow-up from upstream commit 01f545b0b, which returns nil
instead of an uninitialised value for a non-base64 session key.
Hivert Quentin <quentin.hivert.fr@gmail.com> no backport, https://github.com/Alinto/sogo/commit/868ecbea55c44dd44b970543dea5f4b1dc8c5a5c 2026-10-14
draft_path_traversal.patch fix(draft): check the name of the draft Hivert Quentin <quentin.hivert.fr@gmail.com> no upstream, https://github.com/Alinto/sogo/commit/0b71116c956b8a0e4f77593b50d7bad98cd965cb 2026-10-14
bydaymask_buffer_overflow.patch fix(calendar): properly set day mask Hivert Quentin <quentin.hivert.fr@gmail.com> no upstream, https://github.com/Alinto/sogo/commit/46a8ebf69fb3a9163520838e51322583bca9f9c5 2026-10-14
ldap_filter_escaping.patch fix(ldap): properly escape ldap input
The SOGoSession.m hunk of this commit is moved to
session_key_base64_check.patch.
Hivert Quentin <quentin.hivert.fr@gmail.com> no backport, https://github.com/Alinto/sogo/commit/01f545b0b3fe2540fb87da5630e944a4a2afc8a6 2026-10-14

All known versions for source package 'sogo'

Links