Zimbra Forums

For Zimbra 8 OSE you can update using yum/apt update. For other versions you can rebuild from source and we will release the mitigation steps later.

A one-click security vulnerability in all versions of Zimbra Collaboration Suite has been discovered that could allow an unauthenticated attacker to gain access to a Zimbra account. To fix this vulnerability install the latest Zimbra patch (by using apt or yum), the vulnerability is fixed in: - Daff...

halfgaar wrote: ↑Fri Aug 18, 2023 2:14 pm At this point, clamav is becoming more of a problem than me actually getting virussus.

Unofficially: this is how I felt about ClamAV for a long time, if you want AV that catches new threats, the better way is end-point protection.

We will update the readme at: https://github.com/Zimbra/zm-build

Read To build a specific patch under https://github.com/Zimbra/zm-build#building

For Zimbra 10 there is a PR: https://github.com/Zimbra/zm-build/pull/256

I have filed ZBUG-3457 Improve error handling on bad uuencoded inline images

% zmcontrol -v Release 8.8.15_GA_3953.RHEL8_64_20200629025823 RHEL8_64 NETWORK edition, Patch 8.8.15_P40. I believe this is a problem for us now. It has to do with forwarding an inline image that was uuencoded. An example of this would be from a company like Marriott Hotels when they send the state...

Here is what we see in the logs: 2023-05-31 22:47:55,838 ERROR [qtp439928219-42:https://mail.example.com/] [] webclient - Unable to get domain config com.zimbra.common.service.ServiceException: error while proxying request to target server: Service Unavailable If you can try and re-apply the update...

Hello All, For fixing the security policy violation we need to know exactly what steps you took so we can reproduce the issue. Please provide us the reproduction steps with a clean browser, meaning clear all cookies. Cookies from zimbra.com can affect the policy at the wiki. In case you can not repr...

Thanks for reporting this issue, the engineering team is investigating as it has been reported by multiple users.

Anyone that is unsure if their Zimbra system is compromised can look at these 10 steps to get some more insights, https://blog.zimbra.com/2023/04/10-step ... ompromise/ and https://wiki.zimbra.com/wiki/10_steps_t ... compromise