Zimbra not affected by log4j (CVE-2021-44228)
After intensive review and testing, Zimbra Development determined that the 0-day exploit vulnerability for log4j (CVE-2021-44228) does not affect the current Supported Zimbra versions (9.0.0 & 8.8.15). Zimbra Collaboration Server currently uses log4j1 version 1.2.16 which doesn't contain the lookup expression feature that is found within versions 2.0 to 2.17, which is the cause of the vulnerability. Also, Redhat (CVE-2021-4104) vulnerability does not affect the Zimbra Collaboration Server version (8.8.15 & 9.0.0). For this vulnerability to affect the server, it needs JMSAppender, which the ZCS Server does not use, and the ability to append configuration files.

Registration required each time?

General discussion about Zimbra Desktop.
rwebb616
Posts: 20
Joined: Mon Apr 11, 2016 1:52 pm

Registration required each time?

Postby rwebb616 » Fri Aug 31, 2018 5:50 pm

Is there a way to get at the downloads without having to fill out the stupid form every time you want to download an upgrade version? I hate websites that do that! :shock:

Rich


phoenix
Ambassador
Ambassador
Posts: 26912
Joined: Fri Sep 12, 2014 9:56 pm
Location: Liverpool, England

Re: Registration required each time?

Postby phoenix » Fri Aug 31, 2018 5:55 pm

As is mentioned in several forum threads, you can get the downloads here: https://zimbra.org/download/zimbra-collaboration
Regards

Bill

Rspamd: A high performance spamassassin replacement

Per ardua ad astra
rwebb616
Posts: 20
Joined: Mon Apr 11, 2016 1:52 pm

Re: Registration required each time?

Postby rwebb616 » Mon Jan 03, 2022 2:46 am

Old thread I know, but it appears now that the link provided no longer takes you directly to the downloads... once again required to register to get to the downloads. Is there another way?

Rich
User avatar
ianw1974
Advanced member
Advanced member
Posts: 145
Joined: Sat Sep 13, 2014 12:45 am
Location: UK and Poland
ZCS/ZD Version: Zimbra OSE 8.8.15_GA_4059
Contact:

Re: Registration required each time?

Postby ianw1974 » Mon Jan 03, 2022 5:24 pm

Previously, zimbra.com was the domain that only required registration and it was available under zimbra.org to get the downloads without registering. But they changed it sometime during the last 6-12 months as far as I remember. So unfortunately, no, they haven't made the ZCS version available without having to give your email address first.
ghen
Posts: 32
Joined: Thu May 12, 2016 1:56 pm
Location: Belgium

Re: Registration required each time?

Postby ghen » Mon Jan 03, 2022 7:50 pm


Return to “General Questions”

Who is online

Users browsing this forum: No registered users and 5 guests