SOGo team released v5.12.8 on May 12, "Four major vulnerabilities have been reported and fixed in this version 5.12.8 or since the nightly of the 8th of May 2026: sogo_5.12.7.20260508." "Those vulnerabilities affect any previous SOGO version. Please update as soon as possible."

General way to upgrade it is running commands below:

For CentOS / Rocky / AlmaLinux

yum clean all
yum update -y "sogo*" "*sope*"
systemctl restart sogo

For Debian/Ubuntu

apt update
apt install --only-upgrade -y "sogo*" "*sope*"
systemctl restart sogod

For iRedMail Enterprise Edition

- Login to EE as global admin
- Click "Components" on left sidebar
- Click "Re-deploy" button right beside SOGo component
- Click "Apply Now" on bottom-right corner, then toggle on option "Update software to latest version if available" on popup modal window
- Click "Apply".