A new Debian Linux update has been published: DLA 2707-1: sogo security update
A sogo security update has been released for Debian GNU/Linux 9 LTS to address a security issue where SOGo does not validate the signatures of any SAML assertions it receives.Read more @ Linux Compatible