Zimbra Forums

Hi, we have a similar problem. Basically when accepting invitation to recurrent appointments, the originator receives tons of email confirmations. We've opened a case and have been filed with ZBUG-3175 That's not the only issue related to ios and calendar via activesync, we've got some customer with...

I just helped someone over DM and found that two of the three files had been regenerated for me too, in 'public_'. Timestamped 'aug 30 19:04', the same time I accessed the URLs (of non-existing files) with curl. I've checked after and before having tried to access the non existing url. I haven't fo...

That's strange, because all 3 files belong to the zimbra-mbox-webclient-war package... So you should have all 3 of them? (rpm -ql zimbra-mbox-webclient-war | grep hostedlogin) If you suspect two were generated at runtime, what is the age (mtime) of those files, according to ls -l ? Unfortunately I ...

Ok, if talking about it is somewhat permitted I would like to share this detail: When we received the "delete these 3 files" workaround, we first checked if these file existed. We found them existing on every production environment, but NOT on the test environments: on the test envs only t...

Thanks for this post, for me is gold. Useful even for everyone here struggling with mailstores overloaded for deadly z-push requests and tons of "no such waitset" occurring in mailbox.log.
If there was a thank you button, it would be pressed.

Nor the ZBUG-2319 mentioned by Oetiker, nor our last opened ZBUG-3175 appear on https://pm.zimbra.com/b/bug-fixes searching for complete string or part of it.
What is the actual source of truth for the bug fixes?

Are you adding a replica or an another master in mmr? To add a single replica we usually use on the original master: /opt/zimbra/libexec/zmldapenablereplica And installing the new server: Ldap master host: <master.server.com> Ldap replication type: replica To add a secondary master in mmr configurat...

zmcontrol wrote: ↑Fri Aug 25, 2023 8:49 pm If the former, are there any known mailbox.log entries to confirm an exploit attempt?

An official violation check with evidence to bring (logs? files?) is being required from many customers.
INB4, "vulnerability has not been exploited because is not public" is not the answer.

How tf are we supposed to roll upgrade older installations to the imposed daffodil without the archives? Even without the compatibility matrixes.... If I had an evil mind, I would say the people doing the QA on the website change are the same than the one doing QA on ZCS' patches. Call me mad but it...

Don't want to be the usual pest! Many thanks for the quick alert and the resolution. Customers are asking "Thanks for that, but what we actually dodged? Details about the vulnerability, score, cve and circumstances of exploitability? and more than that: how can we trace if it was previously exp...