Patch Security Severity: Medium Deployment Risk: Medium This release focuses on essential security and improving user experience for the following editions Zimbra Daffodil 10.1.1 (Release Notes) Zimbra Daffodil 10.0.9 (Release Notes) Zimbra 9.0.0 Patch-41 (Release Notes) Support, security patches, or updates for Zimbra 9.0.0 General Support will last through 12/31/2024 One-time fix for Zimbra 8.8.15 […]
Prevent Host header injection vulnerability in Zimbra
This is an old issue but Zimbra installations can have a very long life span, in addition it is a good precaution to validate your configuration, just in case. Zimbra Proxy has the ability to strictly enforce which values are allowed in the Host header passed in by the client. This is enabled by default […]
Enhance password security by rejecting common and leaked passwords
In this article you will learn: How to prevent users from choosing common passwords How to add leaked passwords to the list of passwords to reject Enabled the Reject Common Passwords feature You can enable the Zimbra Reject Common Passwords on a per account basis or for an entire Class Of Service (CoS). To enable […]
Zimbra Daffodil V10.1 is here
Zimbra Daffodil V10.1 has arrived. Let’s bloom together. In this blog, we will cover What’s New in Zimbra Daffodil V10.1 #ICYMI How to Get Started – For new users and users looking to upgrade _______________________________ What’s New in Zimbra Daffodil V10.1 License Enhancements Changes in the license are now managed by the Zimbra Collaboration team. Updates will […]
Zimbra Daffodil 10.1 – Prepare for upgrade
Thanks to the incredible support and feedback from the community, the much-anticipated update is almost ready! We will be releasing Zimbra Daffodil 10.1 in the coming days. Preparing for your upgrade In addition to the new features in an earlier blog post, here is some additional information to consider. Zimbra New Licensing System Attention! Zimbra […]
How to disable Zimbra two factor trusted devices
By Barry de Graaff on June 26, 2024 in Did You Know, Partners, PowerTips – Admins, Security & Privacy
It is well known that you can enable 2FA in Zimbra Network Edition to enhance account security. All details on Zimbra 2FA can be found at https://wiki.zimbra.com/wiki/Zimbra_Two-factor_authentication Zimbra also enables by default the Trusted Devices feature. This allows users to enter their 2FA token only once for each device. Consider turning off the Trusted Devices […]