Zimbra Forums

I just upgraded on RHEL 8 from Ian's Q3 build to the Maldua 10.1.15p1 (sorry, Ian) because of the endless critical embargoed patch issue with Zimbra upstream. I ran into two problems: 1) I had to undo my "dnf versionlock" on zimbra-jetty-distribution (which was to work around a different Z...

Thanks for this. I've been looking for a set of anti-phishing rules because we've been getting so much fake Zimbra admin spam. It's infuriating.

Feedback on any of these is welcome. Is it worth releasing an Imap broken release? My preference in FOSS releases is to have the most effort invested in making sure the latest release with as many ported security fixes is broadly available and tested. i don't see value in "parity releases"...

It seems that there's a list of sites running ZCS (presumably by scanning for signatures) that I'm on, and I've been seeing huge volumes of phishing attacks (mostly phony calendar invites) that link out to a fake Zimbra login page to steal credentials. These all come in through compromised accounts ...

Yes you will need network edition license to get access to Modern UI Where can I find related information? You will have to contact a distributor: https://www.zimbra.com/connect/partners/find-a-partner/?type=licensed-email-var A word of warning; unless you are in a "developing market" you...

adrian.gibanel.btactic wrote: ↑Sun Nov 09, 2025 10:42 pm I'm pretty lost on what might be the problem here but for now, after checking zm-mailbox develop branch my guess is: ZCS-17622:Apache mina version update.

Oooh, yes -- good catch. This is in the data path, and definitely a candidate for a potential cause.

Maybe I should rephrase the question as... Are you sure that your proposal would not affect NE installations when you try to reinstall/upgrade them thanks to their NE tgz installer? Ahhhh; thanks for the context. No, I don't know this -- I'm not at all familiar with the NE installer. It's not reall...

My personal bet on this imap issue is the AntiSamy update and that legacy @import sanitization logic removal. Also the nginx module update regarding security standards seems a good candidate. In any case for those of you that want to experiment in a throw-away VPS there's Maldua's ZCS FOSS 10.1.10....

I think that if you pinned the packages as you suggest (with package dependencies versions having to be exactly the same). If you were to take the original ZCS NE 10.1.0 tgz installer and ask for an upgrade it would actually downgrade all of those pinned packages as a consequence of reinstalling th...

I have nothing to really add, other than sharing your frustration. It is unproductive to simply fork the Zimbra projects and try to maintain this as a community effort -- there is not a large-enough installed base that depends on the ZCS suite but is fine with not getting enterprise-grade support. S...