In this case you did not update the nethserver-sogo package, you don’t need to.
ahah: now get your question, yes it’s 644 by design and i am going to solve this in the new nethserver-sogo package.
We need group read permissions for the the sogo group for easy use of sogo-tool. sogo.conf should be owned by root:sogo, others should not have read permissions.
Thanx for pointing this out! 