https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.19
Please post your patching and/or upgrading results here.
---
Changes summary
( This is an small summary. Check the release notes above for the complete changes. )
Security Fixes
- Fixed a stored cross-site scripting (XSS) vulnerability in the Classic Web Client where crafted emails could execute malicious script in a user's session.
- Customers upgrading from ZCS 10.1.x: No additional action is required. If the SNMP mitigation has already been applied on your existing 10.1.x deployment, it will remain effective after upgrading to ZCS v10.1.19.
- Customers upgrading from ZCS 10.0.x, 9.0.x, or 8.8.15: The SNMP mitigation must be updated and reapplied after upgrading to ZCS v10.1.19.
- For customers upgrading from ZCS 10.0.x, 9.0.x, or 8.8.15, please follow the updated SNMP mitigation steps provided in the Security Advisory after completing the upgrade. If you have any questions or require assistance with the mitigation, please raise a Support ticket.
Please take this thread as a Network Edition only release. ZCS FOSS builds feedback in this thread are usually not useful because the FOSS version might not be ready to be built because of embargos or previous or current versions. (Explanation.)
