Hello All, The Zeta Alliance will do some more crowd funding in 2019, to make Zimbra even better. We are looking for your input to see what projects to fund. Please take the survey and help us decide on our next crowdfunding project! It only takes 15 seconds or so. https://www.surveymonkey.com/r/59H...

Since you are on CentOS6, I am guessing you did a lot of in-place upgrades. There is a high change you will run into more issues,
even if you fix the current one.

Perhaps consider migrating to a fresh install.

There is an extension/Zimlet called Zimbra User Alias that allows a user to add alias to the users account.

https://github.com/Zimbra-Community/user-alias

Hello All, Since we have upgraded from 8.6 to 8.7.11 we are plagued by a bug that is hard to reproduce. What happens is that a user composes an email and then hits send. Then Zimbra sends an email with empty message body. It is hard to reproduce but I feel it happens often on replies with inline ima...

Milter probably still works, perhaps a binary changed location.

Did you check the log? Also I filed an issue here to track any progress from the forum.

https://github.com/Zimbra-Community/mai ... s/issues/5

I think the real problem is the communication and lack of a security overview/summary page where all this stuff is documented.

Because even if stuff gets fixed, after some time, it is hard to understand what happened and when.

https://github.com/Zimbra/zm-web-client ... 924b915d68 <-- Looks like code clean-up

According to Malte Stretz: These are the last two XSS issues fixed: https://github.com/Zimbra/zm-web-client/commit/8c646be0322c0ab6858652c184133b924b915d68 https://github.com/Zimbra/zm-web-client/commit/92d2886277e7d8d4f4835a26355fa93dfebc5504 I looked into: ZCS-2645 Bug 108265 - Persistent XSS - me...

Hello Abhi, Sorry, it's a bit late. But for whoever else may need it. First you need to add for all your trusted proxies: zmprov mcf +zimbraMailTrustedIP < trusted zimbra proxies here > Then in your extension: ZimbraSoapContext zsc = getZimbraSoapContext(context); zsc.getRequestIP() I tried this on ...

In the Universal UI (New UI) the setting `Display names in place of email addresses when available` does not have any effect, the short name is always displayed by default. And one has to click a down arrow to show the from and to headers. To prevent spoofing, can I suggest, please consider ALWAYS t...