Dear all,

SOGo team released v5.12.8 on May 12, "Four major vulnerabilities have been reported and fixed in this version 5.12.8 or since the nightly of the 8th of May 2026: sogo_5.12.7.20260508." "Those vulnerabilities affect any previous SOGO version. Please update as soon as possible."

General way to upgrade it is running commands below:

For CentOS / Rocky / AlmaLinux

yum clean all
yum update -y "sogo*" "*sope*"
systemctl restart sogo

For Debian/Ubuntu

apt update
apt install --only-upgrade -y "sogo*" "*sope*"
systemctl restart sogod

For iRedMail Enterprise Edition

- Login to EE as global admin
- Click "Components" on left sidebar
- Click "Re-deploy" button right beside SOGo component
- Click "Apply Now" on bottom-right corner, then toggle on option "Update software to latest version if available" on popup modal window
- Click "Apply".