[SECURITY] [DLA 4434-1] sogo security update

Debian LTS Advisory DLA-4434-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost January 06, 2026 https://wiki.debian.org/LTS Package : sogo Version : 5.0.1-4+deb11u3 CVE ID : CVE-2024-34462 CVE-2025-63499 Debian Bug : 1071163 1121952 Several XSS vulnerabiltiies have...

Debian dla-4434 : sogo - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4434 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4434-1 [email protected]...

Linux Distros Unpatched Vulnerability : CVE-2025-63499

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting XSS via the theme parameter. CVE-2025-63499 Note that Nessus relies on the presence of the package as...

CVE-2025-63499

Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting XSS via the theme parameter...

CVE-2025-63499

creationtimestamp| type| source ---|---|--- 2025-11-20 13:53:59+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60292 2025-11-20 21:00:05+00:00| published-proof-of-concept| Telegram/nY5-0lCVx8RKsRPrkDgSLkXo8AbHt3usOoKy9LAJ3yK8Xw 2025-12-02 09:05:34+00:00| published-proof-of-concept|...

Exploit for CVE-2025-63499

CVE-2...

EUVD-2025-63499

Malicious code in insufficientcentipedez3n npm...