Zimbra not affected by log4j (CVE-2021-44228)
After intensive review and testing, Zimbra Development determined that the 0-day exploit vulnerability for log4j (CVE-2021-44228) does not affect the current Supported Zimbra versions (9.0.0 & 8.8.15). Zimbra Collaboration Server currently uses log4j1 version 1.2.16 which doesn't contain the lookup expression feature that is found within versions 2.0 to 2.17, which is the cause of the vulnerability. Also, Redhat (CVE-2021-4104) vulnerability does not affect the Zimbra Collaboration Server version (8.8.15 & 9.0.0). For this vulnerability to affect the server, it needs JMSAppender, which the ZCS Server does not use, and the ability to append configuration files.

ZCO and Office/Outlook 2021

Ask your questions and get help with Zimbra's Outlook Connector.
Posts: 4
Joined: Tue Feb 02, 2021 9:40 am

ZCO and Office/Outlook 2021

Postby adamdudzik » Thu Dec 02, 2021 7:30 am


Tell me something - is ZCO ( if this is important) is ready for Outlook 2021? In official documentation support ended on "Outlook 2019: 32-bit and 64-bit editions of Microsoft Office, including Click to run". (https://zimbra.github.io/zm-windows-com ... Guide.html)

User avatar
L. Mark Stone
Elite member
Elite member
Posts: 2309
Joined: Wed Oct 09, 2013 11:35 am
Location: Portland, Maine, US
ZCS/ZD Version: 8.8.15 Network Edition

Re: ZCO and Office/Outlook 2021

Postby L. Mark Stone » Thu Dec 02, 2021 2:48 pm

As a Network Edition customer, this is one of those questions you are totally justified in opening a Support Case for.
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
Zeta Alliance http://www.zetalliance.org/

Return to “Zimbra Connector for Outlook”

Who is online

Users browsing this forum: No registered users and 7 guests